Moodle CVE-2011-4306 Cross-Site Scripting Vulnerability
BID:73595
Info
Moodle CVE-2011-4306 Cross-Site Scripting Vulnerability
| Bugtraq ID: | 73595 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-4306 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 11 2012 12:00AM |
| Updated: | Jul 11 2012 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Moodle Moodle 1.9.13 Moodle Moodle 1.9.12 Moodle Moodle 1.9.11 Moodle Moodle 1.9.10 Moodle Moodle 1.9.9 Moodle Moodle 1.9.8 Moodle Moodle 1.9.7 Moodle Moodle 1.9.6 Moodle Moodle 1.9.5 Moodle Moodle 1.9.4 Moodle Moodle 1.9.1 Moodle Moodle 1.9.3 Moodle Moodle 1.9.2 Moodle Moodle 1.9 |
| Not Vulnerable: | |
Discussion
Moodle CVE-2011-4306 Cross-Site Scripting Vulnerability
Moodle is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web script or HTML via crafted data.
Moodle is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web script or HTML via crafted data.
Exploit / POC
Moodle CVE-2011-4306 Cross-Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
Solution / Fix
Moodle CVE-2011-4306 Cross-Site Scripting Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]