Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Vulnerability - CVE-2018-1081 - Vulnerability Database
Moodle

Moodle Vulnerability - CVE-2018-1081

Medium
Reference: CVE-2018-1081
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-1081
Title: Moodle Vulnerability
Overview:

A flaw was found in Moodle 3.4 to 3.4.1 3.3 to 3.3.4 3.2 to 3.2.7 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails to admin after request origin was verified otherwise admin email can be spammed.