Detections
Analytics
Moodle 'external.php' 'badge' Parameter XSS
medium Nessus Plugin ID 70023
Language:
Synopsis
The remote web server hosts a PHP script that is affected by a cross- site scripting vulnerability.Description
The version of Moodle installed on the remote host fails to properly sanitize user-supplied input to the 'badge' parameter of the 'external.php' script. The application also fails to properly sanitize serialized objects. An attacker can exploit these issues by crafting a URL containing a serialized object that will inject arbitrary HTML or script code in a users browser. By enticing a user to view this URL, the attacker can exploit these flaws.Note that the unserialization attack mentioned here can be used to perform additional attacks; however, Nessus has only tested for a cross-site scripting vulnerability.
Solution
Upgrade to version 2.5.2 or laterSee Also
https://www.securityfocus.com/archive/1/528652/30/0/threaded
Plugin Details
Severity: Medium
ID: 70023
File Name: moodle_external_badges_xss.nasl
Version: 1.10
Type: remote
Family: CGI abuses : XSS
Published: 9/20/2013
Updated: 6/6/2024
Configuration: Enable thorough checks
Supported Sensors: Nessus
Enable CGI Scanning: true
Risk Information
CVSS Score Rationale: Cvss vector for cross site scripting vulnerability
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS Score Source: manual
Vulnerability Information
CPE: cpe:/a:moodle:moodle
Required KB Items: www/PHP, installed_sw/Moodle
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Patch Publication Date: 9/9/2013
Vulnerability Publication Date: 9/15/2013
Reference Information
CVE: CVE-2013-5674
BID: 62412