Description

webservice/upload.php in Moodle 2.6.x before 2.6.6 and 2.7.x before 2.7.3 does not ensure that a file upload is for a private or draft area, which allows remote authenticated users to upload files containing JavaScript, and consequently conduct cross-site scripting (XSS) attacks, by specifying the profile-picture area.

Remediation

References

CVE-2014-7835

Related Vulnerabilities

WordPress Plugin Facebook Photo Fetcher Unspecified Vulnerability (2.1.17)

WordPress Plugin WassUp Real Time Analytics 'spy.php' SQL Injection (1.4.3)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-45473)

TCExam Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3806)

ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-9044)

Severity

Low

Classification

CVE-2014-7835 CWE-707

Tags

Missing Update Known Vulnerabilities