CVE-2004-1425

Published: Dec 31, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. (dot dot) in the file parameter.

Affected (10)

Products: Moodle: Moodle

Moodle

1 product

Moodle

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 1.1.1
Moodle Moodle	Version 1.2.0
Moodle Moodle	Version 1.2.1
Moodle Moodle	Version 1.3.0
Moodle Moodle	Version 1.3.1
Moodle Moodle	Version 1.3.2
Moodle Moodle	Version 1.3.3
Moodle Moodle	Version 1.3.4
Moodle Moodle	Version 1.4.1
Moodle Moodle	Version 1.4.2