exploit/multi/http/moodle_spelling_binary_rce

weaponized

Moodle Authenticated Spelling Binary RCE

view exploit source metasploittype exploitpublished 2013-10-30catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2013-3630US	medium4.6	41.7% (99th)	Exploit	2013-11-01
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within…
CVE-2013-4341US	medium4.3	21.9% (98th)	Exploit	2013-09-16
Multiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 allow remote attackers to inject arbitr…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.