Detections
Analytics
Moodle MSA-11-0007 'coursetags_more.php' XSS
medium Nessus Plugin ID 58907
Language:
Synopsis
The remote web server hosts a web application that is vulnerable to a cross-site scripting attack.Description
The remote web server is hosting a version of Moodle that is affected by a cross-site scripting vulnerability in the 'show' parameter of the 'tag/coursetags_more.php' script.Solution
Upgrade to version 2.0.2 or later.See Also
Plugin Details
Severity: Medium
ID: 58907
File Name: moodle_msa_11_0007.nasl
Version: 1.10
Type: remote
Family: CGI abuses : XSS
Published: 4/27/2012
Updated: 6/6/2024
Configuration: Enable thorough checks
Supported Sensors: Nessus
Enable CGI Scanning: true
Vulnerability Information
CPE: cpe:/a:moodle:moodle
Required KB Items: www/PHP, installed_sw/Moodle
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 3/1/2011
Vulnerability Publication Date: 3/1/2011
Reference Information
BID: 46646