Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Moodle Improper Input Validation Vulnerability - CVE-2012-6099 - Vulnerability Database
Moodle

Moodle Improper Input Validation Vulnerability - CVE-2012-6099

Medium
Reference: CVE-2012-6099
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-6099
Title: Moodle Improper Input Validation Vulnerability
Overview:

The moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10 2.2.x before 2.2.7 2.3.x before 2.3.4 and 2.4.x before 2.4.1 does not properly validate pathnames which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.