Description

repository/repository_ajax.php in Moodle 2.2.x before 2.2.5 and 2.3.x before 2.3.2 allows remote authenticated users to bypass intended upload-size restrictions via a -1 value in the maxbytes field.

Remediation

References

CVE-2012-4400

Related Vulnerabilities

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14173)

Chamilo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-6787)

WordPress Plugin bSuite Cross-Site Scripting (4.0.7)

WordPress 5.8.x Multiple Prototype Pollution Vulnerabilities (5.8 - 5.8.3)

WordPress Plugin Edit Comments XT Cross-Site Scripting (1.0)

Severity

Medium

Classification

CVE-2012-4400 CWE-264

Tags

Missing Update Known Vulnerabilities