Description

Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to (1) admin/utfdbmigrate.php or (2) filter.php.

Remediation

References

CVE-2007-1429

Related Vulnerabilities

WordPress Plugin 10Web Map Builder for Google Maps Cross-Site Scripting (1.0.69)

Envoy Proxy Asymmetric Resource Consumption (Amplification) Vulnerability (CVE-2026-47774)

PostgreSQL Out-of-bounds Read Vulnerability (CVE-2019-10129)

WordPress Plugin Media Tags Cross-Site Scripting (3.2.0.2)

Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2022-42127)

Severity

High

Classification

CVE-2007-1429

Tags

Missing Update Known Vulnerabilities