NVD

Id
44176  
Name
CVE-2012-2364  
Description
Cross-site scripting (XSS) vulnerability in lib/filelib.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to inject arbitrary web script or HTML via an assignment submission with zip compression, leading to text/html rendering during a "download all" action.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-07-20  
Modified Date
2012-07-23  
Seq
2012-2364  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221858 44176 CVE-2012-2364 http://git.moodle.org/gw?p=moodle.git;a=commit;h=ce4126c7a9e07dd0514f7ac297b5e60cad0b8d20  View
221859 44176 CVE-2012-2364 [oss-security] 20120523 Moodle security notifications public  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27553 JVNDB-2012-003260 Moodle の lib/filelib.php におけるクロスサイトスクリプティングの脆弱性 Moodle の lib/filelib.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-2364 55602 CVE-2012-2364 44176 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003260.html 2012-07-21 2012-07-24 View