Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Other Vulnerability - CVE-2006-0147 - Vulnerability Database
Moodle

Moodle Other Vulnerability - CVE-2006-0147

High
Reference: CVE-2006-0147
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2006-0147
Title: Moodle Other Vulnerability
Overview:

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70 as used in multiple products including (1) Mantis (2) PostNuke (3) Moodle (4) Cacti (5) Xaraya (6) PhpOpenChat possibly (7) MAXdev MD-Pro and (8) Simplog allows remote attackers to execute arbitrary PHP functions via the do parameter which is saved in a variable that is then executed as a function as demonstrated using phpinfo.