支持本站 — 捐款将帮助我们持续运营

目标:1000 元,已筹:752

75.2%

POC详情: aba82990917b24131810d428e60385df3c9d9129

来源
关联漏洞
标题:Moodle 安全漏洞 (CVE-2025-26529)
描述:Moodle是Moodle开源的一套免费的电子学习软件平台,也称课程管理系统、学习管理系统或虚拟学习环境。 Moodle存在安全漏洞,该漏洞源于描述信息没有进行额外清理,导致跨站脚本攻击。
描述
Environment used to find Moodle CVE-2025-26529
介绍
# Moodle Docker Setup

This project provides a quick and easy way to set up and debug a Moodle environment using Docker and Docker Compose. 

## Version

- **Moodle Version**: 4.4.5

## Vulnerability Information

Please note that this setup is **vulnerable to CVE-2025-26529**.

## Prerequisites

Before you begin, ensure you have the following installed on your system:

- [Docker](https://docs.docker.com/get-docker/)
- [Docker Compose](https://docs.docker.com/compose/install/)
- [Visual Studio Code (VS Code)](https://code.visualstudio.com/) (Recommended for development)

## Getting Started

Follow these steps to get your Moodle environment up and running:

### 1. Clone the repository

Clone this repository to your local machine:

```bash
git clone <repository-url>
```


### Download the moodle source code 
```bash
wget https://github.com/moodle/moodle/archive/refs/tags/v4.4.5.zip
unzip v4.4.5.zip 
mv moodle-4.4.5 src
```

```bash
docker-compose up -d
```
```bash
chmod 777 moodledata
```
# moodleTestingEnv
文件快照

[4.0K] /data/pocs/aba82990917b24131810d428e60385df3c9d9129 ├── [ 22] custom.ini ├── [ 729] docker-compose.yml ├── [ 713] Dockerfile ├── [4.0K] exploit │   ├── [ 9] exploit.js │   └── [3.1K] exploit.py ├── [1020] README.md └── [ 219] xdebug.ini 1 directory, 7 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问,请发送邮箱到 f.jinxu#gmail.com 索取本地快照(把 # 换成 @)。
    3. 神龙已为您对POC代码进行快照,为了长期维护,请考虑为本地POC付费,感谢您的支持。