CVE-2015-2273 in Moodle情報

要約

〜によって MITRE

Cross-site scripting (XSS) vulnerability in mod/quiz/report/statistics/statistics_question_table.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the student role for a crafted quiz response.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

予約する

2015年03月09日

公開

2015年06月01日

モデレーション

承諾済み

エントリ

VDB-75651

CPE

準備完了

CWE

CWE-79 (確認済み)

CVSS

3.5 (NVD)

EPSS

0.01459

KEV

いいえ

アクティビティ

非常低い

セクター

Police, Education

ソース

MITRE	https://www.cve.org/CVERecord?id=CVE-2015-2273
NVD	https://nvd.nist.gov/vuln/detail/CVE-2015-2273
CVE Details	https://www.cvedetails.com/cve/CVE-2015-2273/

◂ 前概要次 ▸

Want to know what is going to be exploited?

We predict KEV entries!