Moodle Jmol Filter 6.1 - Local File Inclusion

By kannthu

High

Vidoc Module

#moodle#lfi#edb

Description

Author: madrobot Classification CWE-ID: CWE-22 CVSS-Metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:F/RL:W/RC:C CVSS-Score: 7.5 Moodle is vulnerable to local file inclusion. Reference - https://www.exploit-db.com/exploits/46881 Metadata max-request: 1

Module preview

Concurrent Requests (1)

1. HTTP Request template

GET/filter/jmol/js/jsmo...

Matching conditions

status: 200and

regex: root:.*:0:0:

Passive global matcher

No matching conditions.

On match action

Report vulnerability