Description

Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) doc/index.php or (2) files/index.php.

Remediation

References

CVE-2006-4784

Related Vulnerabilities

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-5644)

WordPress Plugin SiteGround Security Security Bypass (1.2.5)

WordPress Plugin Gallery Blocks with Lightbox. Image Gallery, (HTML5 video , YouTube, Vimeo) Video Gallery and Lightbox for native gallery Cross-Site Scripting (2.2.0)

OpenVPN AS Other Vulnerability (CVE-2021-4234)

ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-9455)

Severity

Medium

Classification

CVE-2006-4784

Tags

Missing Update Known Vulnerabilities