PT-2005-4406 · Moodle · Moodle

Rgod · Publicado 2005-11-17 · Atualizado 2016-10-18 · CVE-2005-3649

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Moodle version 1.5.2

Description The issue allows remote attackers to redirect users to other sites. This is achieved by manipulating the jump parameter in the jumpto.php file.

Recommendations For Moodle version 1.5.2, consider restricting access to the jumpto.php file until a patch is available. As a temporary workaround, avoid using the jump parameter in the jumpto.php file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-3649

Produtos afetados

Moodle

Referências · 9

• 🔥 https://exploit-db.com/exploits/1312 · Exploit
• 🔥 http://rgod.altervista.org/moodle16dev.html · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3649 · Nota
• http://secunia.com/advisories/17526 · Aviso do Fabricante
• http://securityreason.com/securityalert/168 · Nota
• http://marc.info/?l=bugtraq&m=113165668814241&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3649 · Nota de Segurança
• http://osvdb.org/20750 · Nota
• http://vupen.com/english/advisories/2005/2387 · Nota