Unscored CVE-2007-1429 EUVD-2007-1423GHSA-g9hp-48jv-xq85

Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cm…

Published Mar 13, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to (1) admin/utfdbmigrate.php or (2) filter.php.

References

2409 third-party-advisory
20070311 Remote File Include In Script moodle-1.7.1 mailing-list
SUSE-SR:2007:015 vendor-advisory