CVE-2011-4307 in Moodle

Sumário

de MITRE

Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 04/11/2011
• Divulgação: 11/07/2012
• Moderação: aceite
• Entrada: VDB-61243
• CPE: pronto
• CWE: CWE-79 (confirmado)
• CVSS: 4.3 (NVD)
• EPSS: 0.01187
• KEV: não
• Atividades: muito baixo
• Sector: Police, Education

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-4307
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-4307
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-4307/