Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2012-6112 - Vulnerability Database
Moodle

Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2012-6112

Medium
Reference: CVE-2012-6112
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-6112
Title: Moodle Permissions Privileges and Access Controls Vulnerability
Overview:

classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE as used in Moodle 2.1.x before 2.1.10 2.2.x before 2.2.7 2.3.x before 2.3.4 and 2.4.x before 2.4.1 and other products does not properly handle control characters which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.