20080111 Cross site scripting (XSS) in Moodle 1.8.3mailing list
http://archives.neohapsis.com/archives/fulldisclosure/2008-01/0202.html CVE-2008-0123
Moodle 1.8.3 - 'install.php' Cross-Site Scripting
Record summary
CVE-2008-0123 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMoodle 1.8.3 - 'install.php' Cross-Site ScriptingExploitDB exploitby Hanno BockNot analyzed1 file
References
9int21.de
http://int21.de/cve/CVE-2008-0123-moodle.html SUSE-SR:2008:003Vendor advisory
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html 28838Third-party advisory
http://secunia.com/advisories/28838 20080111 Cross site scripting (XSS) in Moodle 1.8.3mailing list
http://www.securityfocus.com/archive/1/486198/100/0/threaded 27259vdb entry
http://www.securityfocus.com/bid/27259 ADV-2008-0164vdb entry
http://www.vupen.com/english/advisories/2008/0164 moodle-install-xss(39630)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/39630 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-0123