CVE Vulnerabilities

CVE-2004-1425

Published: Dec 31, 2004 | Modified: Dec 01, 2020
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. (dot dot) in the file parameter.

Affected Software

Name Vendor Start Version End Version
Moodle Moodle 1.1.1 1.1.1
Moodle Moodle 1.2.0 1.2.0
Moodle Moodle 1.2.1 1.2.1
Moodle Moodle 1.3.0 1.3.0
Moodle Moodle 1.3.1 1.3.1
Moodle Moodle 1.3.2 1.3.2
Moodle Moodle 1.3.3 1.3.3
Moodle Moodle 1.3.4 1.3.4
Moodle Moodle 1.4.1 1.4.1
Moodle Moodle 1.4.2 1.4.2

References