CVE-2008-3326

Moodle 1.6.x < 1.6.7 and 1.7.x < 1.7.5 - Cross-Site Scripting via Blog Entry Title Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-3326. PoCs published by ZeN.

AI-analyzed exploit summary This is a security advisory detailing an LFI vulnerability in OLIB 7 WebView v2.5.1.1, requiring a valid session key. It also includes an unrelated XSS vulnerability in Moodle's blogging system.

Description

Cross-site scripting (XSS) vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the etitle parameter (blog entry title).

Exploits (1)

exploitdb WRITEUP VERIFIED
by ZeN · textwebappsphp
https://www.exploit-db.com/exploits/6653

This is a security advisory detailing an LFI vulnerability in OLIB 7 WebView v2.5.1.1, requiring a valid session key. It also includes an unrelated XSS vulnerability in Moodle's blogging system.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Theoretical
Target: OLIB 7 WebView v2.5.1.1
Auth required
Prerequisites: valid session key
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (10)

Core 10
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31196
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/30348
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/6653
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/494656/100/0/threaded
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2008/dsa-1691
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/43961
Various Sources x_refsource_confirm
http://moodle.org/mod/forum/discuss.php?d=101401
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31339

Scores

EPSS 0.0239
EPSS Percentile 81.8%

Details

CWE
CWE-79
Status published
Products (11)
moodle/moodle 1.6.0
moodle/moodle 1.6.1
moodle/moodle 1.6.2
moodle/moodle 1.6.3
moodle/moodle 1.6.4
moodle/moodle 1.6.5
moodle/moodle 1.6.6
moodle/moodle 1.7.1
moodle/moodle 1.7.2
moodle/moodle 1.7.3
... and 1 more
Published Jul 25, 2008
Tracked Since Feb 18, 2026