Description
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin tool.
Remediation
References
Related Vulnerabilities
WordPress Plugin Art-Picture-Gallery Arbitrary File Upload (1.2.9)
Joomla Cryptographic Issues Vulnerability (CVE-2008-4122)
WordPress Plugin is_human() 'type' Parameter Remote Command Injection (1.4.2)
ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3834)
WordPress Plugin Customer Reviews for WooCommerce Local File Inclusion (5.15.0)