Unscored CVE-2004-1424 EUVD-2004-1421GHSA-79h5-2hp9-w4p4

Cross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or …

Published Feb 12, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.

References

20041227 Multiple Vulnerabilities in Moodle mailing-list
12120 vdb-entry
moodle-view-search-xss(18702) vdb-entry
20041230 Re: Multiple Vulnerabilities in Moodle mailing-list
13694 third-party-advisory