NVD

Id
35123  
Name
CVE-2014-7830  
Description
Cross-site scripting (XSS) vulnerability in mod/feedback/mapcourse.php in the Feedback module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the mod/feedback:mapcourse capability to provide a searchcourse parameter.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-11-24  
Modified Date
2015-09-08  
Seq
2014-7830  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
179780 35123 CVE-2014-7830 http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-47865  View
179781 35123 CVE-2014-7830 [oss-security] 20141117 Moodle security issues are now public  View
179782 35123 CVE-2014-7830 71119  View
179783 35123 CVE-2014-7830 1031215  View
179784 35123 CVE-2014-7830 https://moodle.org/mod/forum/discuss.php?d=275147  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16725 JVNDB-2014-005600 Moodle の Feedback モジュールの mod/feedback/mapcourse.php におけるクロスサイトスクリプティングの脆弱性 Moodle の Feedback モジュールの mod/feedback/mapcourse.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-7830 75123 CVE-2014-7830 35123 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005600.html 2014-11-17 2014-11-25 View