Lucene search
MitreCVE-2004-0725HistoryJul 27, 2004 - 4:00 a.m.
CVE-2004-0725
2004-07-2704:00:00
mitre
web.nvd.nist.gov
46
moodle
xss
vulnerability
remote attackers
web script
html
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.7
Confidence
High
EPSS
0.01
Percentile
84.1%
Cross-site scripting (XSS) vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbitrary web script or HTML via the file parameter.
Affected configurations
Node
moodlemoodleMatch1.1.1
ORmoodlemoodleMatch1.2.0
ORmoodlemoodleMatch1.2.1
ORmoodlemoodleMatch1.3.0
ORmoodlemoodleMatch1.3.1
ORmoodlemoodleMatch1.3.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| moodle | moodle | 1.1.1 | cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:* |
| moodle | moodle | 1.2.0 | cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:* |
| moodle | moodle | 1.2.1 | cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:* |
| moodle | moodle | 1.3.0 | cpe:2.3:a:moodle:moodle:1.3.0:*:*:*:*:*:*:* |
| moodle | moodle | 1.3.1 | cpe:2.3:a:moodle:moodle:1.3.1:*:*:*:*:*:*:* |
| moodle | moodle | 1.3.2 | cpe:2.3:a:moodle:moodle:1.3.2:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
Moodle Help Script 1.x - Cross-Site Scripting
2004-07-13 00:00:00
cvelist
cvelist
CVE-2004-0725
2004-07-23 04:00:00
nessus
nessus
Moodle < 1.3.3 'help.php' 'file' Parameter XSS
2004-07-26 00:00:00
nvd
nvd
CVE-2004-0725
2004-07-27 04:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
5.7
Confidence
High
EPSS
0.01
Percentile
84.1%
Related for CVE-2004-0725