Description

The Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to upload and execute files via a modified Portfolio API callback.

Remediation

References

CVE-2012-5479

Related Vulnerabilities

Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-12529)

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9758)

Java Unspesificed Vulnerability (CVE-2019-2766)

Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.28)

MySQL CVE-2018-3155 Vulnerability (CVE-2018-3155)

Severity

Medium

Classification

CVE-2012-5479 CWE-264

Tags

Missing Update Known Vulnerabilities