Description

Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.

Remediation

References

CVE-2016-9187

Related Vulnerabilities

WordPress Plugin SS Downloads Multiple Cross-Site Scripting Vulnerabilities (1.4.4.1)

CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41165)

Oracle Database Server CVE-2011-0870 Vulnerability (CVE-2011-0870)

WordPress Plugin Marketo Forms and Tracking Cross-Site Request Forgery (1.0.2)

WordPress Plugin Smart Slider 3 PRO Cross-Site Scripting (3.5.0.8)

Severity

High

Classification

CVE-2016-9187 CWE-434 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities