CVE-2004-0725 in Moodle

Summary

Cross-site scripting (XSS) vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbitrary web script or HTML via the file parameter.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

07/22/2004

Disclosure

07/27/2004

Moderation

VulDB entry created

Entries

1

CPE

ready

CWE

CWE-80

Exploit

Download

CVSS

4.3

EPSS

0.01960

CTI

0.00

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-0725
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-0725
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-0725/