Unscored CVE-2004-1425 EUVD-2004-1422GHSA-3vcq-64gh-84x2

Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known…

Published Feb 12, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. (dot dot) in the file parameter.

References

20041227 Multiple Vulnerabilities in Moodle mailing-list
12120 vdb-entry
20041230 Re: Multiple Vulnerabilities in Moodle mailing-list
moodle-directory-traversal(18550) vdb-entry