ID de Prueba:	1.3.6.1.4.1.25623.1.0.14257
Categoría:	Web application abuses
Título:	Moodle post.php XSS
Resumen:	The version of Moodle on the remote host contains a flaw that allows a; remote cross site scripting attack because the application does not validate the 'reply' variable upon; submission to the 'post.php' script.
Descripción:	Summary: The version of Moodle on the remote host contains a flaw that allows a remote cross site scripting attack because the application does not validate the 'reply' variable upon submission to the 'post.php' script. Vulnerability Impact: This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity. Solution: Upgrade to Moodle 1.4 or newer. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1711 BugTraq ID: 10884 http://www.securityfocus.com/bid/10884 Bugtraq: 20040806 xss in moodle (post.php) (Google Search) http://marc.info/?l=bugtraq&m=109182851216921&w=2 http://secunia.com/advisories/12262 XForce ISS Database: moodle-post-xss(16924) https://exchange.xforce.ibmcloud.com/vulnerabilities/16924
Copyright	Copyright (C) 2004 David Maciejak

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.