Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-9186

Опубликовано: 04 нояб. 2016
Источник: nvd
CVSS3: 8.8
CVSS2: 6.5
EPSS Низкий

Описание

Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
Версия до 3.1.2 (включая)

EPSS

Процентиль: 88%
0.04385
Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

ubuntu логотип

CVE-2016-9186

CVSS3: 8.8
ubuntu
больше 8 лет назад

Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.

debian логотип

CVE-2016-9186

CVSS3: 8.8
debian
больше 8 лет назад

Unrestricted file upload vulnerability in the "legacy course files" an ...

github логотип

GHSA-vg4g-6rhx-p7rr

CVSS3: 8.8
github
около 3 лет назад

Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.

EPSS

Процентиль: 88%
0.04385
Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434