PT-2019-12437 · Moodle · Moodle

Published 2019-05-01 · Updated 2021-10-12 · CVE-2019-11631

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)

Description A shell upload exploit has been identified, potentially allowing unauthorized access. The issue is related to the admin functionality of the software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2019-11631

Affected Products

Moodle

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/moodle_admin_shell_upload.rb · Exploit
• 🔥 https://exploit-db.com/exploits/46775 · Exploit
• https://ubuntu.com/security/CVE-2019-11631 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-11631 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-11631 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-11631 · Security Note
• http://pentest.com.tr/exploits/Moodle-3-6-3-Install-Plugin-Remote-Command-Execution.html · Note
• https://t.me/defcon_news/87283 · Telegram Post