Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. (dot dot) in the file parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Moodle 安全漏洞
Vulnerability Description
Moodle2是一套免费、开源的电子学习软件平台，也称课程管理系统、学习管理系统或虚拟学习环境。 Moodle存在多个安全漏洞。该漏洞源于Moodle对用户提交的请求缺少充分过滤，远程攻击者可以利用这个漏洞获得敏感信息或查看文件内容。问题一是跨站脚本问题：'/mod/forum/view.php'对用户提交给'$search'变量数据缺少充分过滤，提交包含恶意HTML代码作为变量数据，可导致敏感信息泄露。问题二是会话文件泄露问题：所有包含会话数据的文件保存在`moodledata`目录中，本来必须隐藏的，
CVSS Information
N/A
Vulnerability Type
N/A