Detections
Analytics
CVE-2016-2152
medium
Description
Multiple cross-site scripting (XSS) vulnerabilities in auth/db/auth.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via an external DB profile field.
References
https://github.com/advisories/GHSA-6mxm-wpqv-675h
https://moodle.org/mod/forum/discuss.php?d=330174
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-2831
http://www.securitytracker.com/id/1035333
http://www.openwall.com/lists/oss-security/2016/03/21/1
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50705