Description

Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.

Remediation

References

CVE-2016-9186

Related Vulnerabilities

MySQL CVE-2019-2834 Vulnerability (CVE-2019-2834)

ATutor Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-1000002)

WordPress Plugin Wow Forms-create any form with custom style SQL Injection (3.1.3)

Atlassian Jira Missing Authentication for Critical Function Vulnerability (CVE-2019-8449)

Jenkins Integer Overflow or Wraparound Vulnerability (CVE-2023-36478)

Severity

High

Classification

CVE-2016-9186 CWE-434 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities