Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4826
HistoryJul 30, 2017 - 9:59 p.m.

PHP Object Injection

2017-07-3021:59:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

EPSS

0.045

Percentile

92.5%

Moodle is vulnerable to PHP object injection and arbitrary code execution. The repositories component of Moodle contains a flaw which allows these attacks through serialized data containing objects defined in an add-on.