CVE-2011-4280

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2011-4280
Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as used in Moodle 2.0.x before 2.0.2 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://openwall.com/lists/oss-security/2011/11/14/1
http://moodle.org/mod/forum/discuss.php?d=170005 Vendor Advisory
http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=bd654f0ced8af925c27b7c94321f0c299b50b38e
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:moodle:moodle:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:nimish_pachapurkar:spike_phpcoverage:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:2.0.0:*:*:*:*:*:*:*
History

07 Nov 2023, 02:09

Type Values Removed Values Added
References
  • {'url': 'http://git.moodle.org/gw?p=moodle.git;a=commit;h=bd654f0ced8af925c27b7c94321f0c299b50b38e', 'name': 'http://git.moodle.org/gw?p=moodle.git;a=commit;h=bd654f0ced8af925c27b7c94321f0c299b50b38e', 'tags': [], 'refsource': 'CONFIRM'}
  • () http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=bd654f0ced8af925c27b7c94321f0c299b50b38e -
Information

Published : 2012-07-16 10:28

Updated : 2023-11-07 02:09

NVD link : CVE-2011-4280

Mitre link : CVE-2011-4280

JSON object : View

Products Affected

moodle

  • moodle

nimish_pachapurkar

  • spike_phpcoverage
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')