Description
A path traversal vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the query parameter in jsmol.php. The script directly passes user input to the file_get_contents() function without proper validation, allowing attackers to read arbitrary files from the server's filesystem by crafting a malicious query value. This vulnerability can be exploited without authentication and may expose sensitive configuration data, including database credentials. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-02 UTC.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Moodle | Jmol Plugin | ≤ 6.1 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Moodle Jmol Filter 6.1 - Local File Inclusion http/cves/2025/CVE-2025-34031.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
References
- https://www.dionach.com/moodle-jmol-plugin-multiple-vulnerabilities/ exploit technical-description
- https://www.exploit-db.com/exploits/46881 third-party-advisory exploit
- https://vulncheck.com/advisories/moodle-lms-jmol-plugin-path-traversal third-party-advisory