Description
repository/repository_ajax.php in Moodle 2.2.x before 2.2.5 and 2.3.x before 2.3.2 allows remote authenticated users to bypass intended upload-size restrictions via a -1 value in the maxbytes field.
Remediation
References
Related Vulnerabilities
WordPress Plugin Theme Tweaker Cross-Site Request Forgery (5.20)
WordPress Plugin Count per Day Multiple Cross-Site Scripting Vulnerabilities (3.5.4)
WordPress Other Vulnerability (CVE-2007-2627)
WordPress Plugin Sendit WP Newsletter 'id' Parameter SQL Injection (2.1.0)
Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2020-12603)