CVE-2024-43425 PoC — Moodle 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43425.yaml

Associated Vulnerability

Title:Moodle 安全漏洞 (CVE-2024-43425)
Description:Moodle是Moodle开源的一套免费的电子学习软件平台，也称课程管理系统、学习管理系统或虚拟学习环境。 Moodle存在安全漏洞，该漏洞源于需要额外的限制来避免计算问题类型中的远程代码执行风险。

Description

Attackers with the permission to create or modify questions in Moodle courses are able to craft malicious inputs for calculated questions, which can be abused to execute arbitrary commands on the underlying system.

File Snapshot


 id: CVE-2024-43425

info:
  name: Moodle - Remote Code Execution
  author: iamnoooob,rootxharsh,pdre

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!