Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2013-5674 - Vulnerability Database
Moodle

Moodle Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2013-5674

High
Reference: CVE-2013-5674
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2013-5674
Title: Moodle Improper Control of Generation of Code (Code Injection) Vulnerability
Overview:

badges/external.php in Moodle 2.5.x before 2.5.2 does not properly handle an object obtained by unserializing a description of an external badge which allows remote attackers to conduct PHP object injection attacks via unspecified vectors as demonstrated by overwriting the value of the userid parameter.