Description
Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.
Remediation
References
Related Vulnerabilities
WordPress Plugin 3DPrint Lite Arbitrary File Upload (1.9.1.4)
phpMyFAQ CVE-2007-1032 Vulnerability (CVE-2007-1032)
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.12)
Envoy Proxy Incomplete Cleanup Vulnerability (CVE-2023-35945)
WordPress Plugin JobSearch WP Job Board Cross-Site Scripting (1.5.5)