Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to (1) admin/utfdbmigrate.php or (2) filter.php.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Moodle | Moodle | 1.7.1 (including) | 1.7.1 (including) |
| Moodle | Ubuntu | dapper | * |
| Moodle | Ubuntu | edgy | * |
| Moodle | Ubuntu | feisty | * |