PT-2019-12437 · Moodle · Moodle

Publicado 2019-05-01 · Atualizado 2021-10-12 · CVE-2019-11631

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)

Description A shell upload exploit has been identified, potentially allowing unauthorized access. The issue is related to the admin functionality of the software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2019-11631

Produtos afetados

Moodle

Referências · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/moodle_admin_shell_upload.rb · Exploit
• 🔥 https://exploit-db.com/exploits/46775 · Exploit
• http://pentest.com.tr/exploits/Moodle-3-6-3-Install-Plugin-Remote-Command-Execution.html · Nota
• https://ubuntu.com/security/CVE-2019-11631 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-11631 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-11631 · Nota de Segurança
• https://t.me/defcon_news/87283 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-11631 · Nota de Segurança