Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2014-3541

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-fccf-p8fx-vjj4

Moodle vulnerable to PHP object injection attacks The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary code via serialized data associated with an add-on.

gitlab/packagist/moodle/moodle/CVE-2014-3541

Improper Control of Generation of Code ('Code Injection') The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary code via serialized data associated with an add-on.