Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

moodle: cross-site scripting

Package(s):

moodle

CVE #(s):

CVE-2007-3555

Created:

August 7, 2007

Updated:

December 22, 2008

Description:

A cross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 allows remote attackers to inject arbitrary web script or HTML via a style expression in the search parameter.

Alerts:

Debian	DSA-1691-1	2008-12-22
Fedora	FEDORA-2008-0610	2008-01-15
Fedora	FEDORA-2007-1445	2007-08-06

(Log in to post comments)