CVE-2008-0123: XSS
Published Jan 12, 2008
·Updated
Cross-site scripting (XSS) vulnerability in install.php for Moodle 1.8.3, and possibly other versions before 1.8.4, allows remote attackers to inject arbitrary web script or HTML via the dbname parameter. NOTE: this issue only exists until the installation is complete.
Affected Software
1 affected component
Moodle moodle<=1.8.3
Event History
Jan 12, 2008
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0123?
CVE-2008-0123 is classified as a medium severity cross-site scripting vulnerability.
2
What versions of Moodle are affected by CVE-2008-0123?
CVE-2008-0123 affects Moodle versions up to and including 1.8.3.
3
How do I fix CVE-2008-0123?
To fix CVE-2008-0123, upgrade your Moodle installation to version 1.8.4 or later.
4
What type of attack can be performed using CVE-2008-0123?
CVE-2008-0123 allows remote attackers to inject arbitrary web scripts or HTML into a vulnerable instance.
5
Is CVE-2008-0123 exploitable after installation is complete?
No, CVE-2008-0123 only exists during the installation phase of Moodle.