Vulnerabilities > CVE-2005-3649 - Remote Security vulnerability in Moodle 1.5.2

047910
CVSS 2.6 - LOW
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
high complexity
moodle
exploit available
NVD
Published: 2005-11-17
Updated: 2016-10-18

Summary

jumpto.php in Moodle 1.5.2 allows remote attackers to redirect users to other sites via the jump parameter.

Vulnerable Configurations

Part Description Count
Application
Moodle
1

Exploit-Db

descriptionMoodle <= 1.6dev SQL Injection / Command Execution Exploit. CVE-2005-3649. Webapps exploit for php platform
idEDB-ID:1312
last seen2016-01-31
modified2005-11-10
published2005-11-10
reporterrgod
sourcehttps://www.exploit-db.com/download/1312/
titleMoodle <= 1.6dev SQL Injection / Command Execution Exploit

References