Tnot123

2 exploits Active since Jul 2017

CVE-2024-43425 NOMISEC HIGH WRITEUP

Moodle Remote Code Execution (CVE-2024-43425)

A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.

CVSS 8.1

View Code

CVE-2017-9822 NOMISEC HIGH WRITEUP

DotNetNuke < 9.1.1 - Remote Code Execution via Cookie Deserialization

DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."

CVSS 8.8

View Code