CVE-2006-4941

2006-09-2300:00:00

mitre

www.cve.org

moodle

cross-site scripting

vulnerabilities

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

50.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Moodle before 1.6.2 might allow remote attackers to inject arbitrary web script or HTML via (1) the choose parameter in files/index.php and (2) the sub parameter in doc/index.php.

References

docs.moodle.org/en/Release_notes#Moodle_1.6.2