CVE-2011-4280: XSS
Published Jul 16, 2012
·Updated
Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as used in Moodle 2.0.x before 2.0.2 and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
4 affected componentsFixes available
composer/moodle/moodle>=2.0<2.0.2
2.0.2
Moodle Moodle=2.0.0
Moodle Moodle=2.0.1
Nimish Pachapurkar Spike Phpcoverage
Event History
Jul 16, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
May 13, 2022
Advisory Published
via GitHub·01:13 AM
Frequently Asked Questions
1
What is the severity of CVE-2011-4280?
CVE-2011-4280 has a medium severity rating due to its cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2011-4280?
To fix CVE-2011-4280, update the Moodle software to version 2.0.2 or later.
3
What software versions are affected by CVE-2011-4280?
CVE-2011-4280 affects Moodle versions 2.0.0 and 2.0.1, as well as the Spike PHPCoverage library.
4
Can CVE-2011-4280 be exploited remotely?
Yes, CVE-2011-4280 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.
5
What types of attacks can result from CVE-2011-4280?
CVE-2011-4280 can lead to various types of attacks, including session hijacking and defacement through XSS.