Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2012-5479 - Vulnerability Database

Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2012-5479

Medium
Reference: CVE-2012-5479
Title: Moodle Permissions Privileges and Access Controls Vulnerability
Overview:

The Portfolio plugin in Moodle 2.1.x before 2.1.9 2.2.x before 2.2.6 and 2.3.x before 2.3.3 allows remote authenticated users to upload and execute files via a modified Portfolio API callback.