CVE-2012-6112

Published: Jan 27, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.

Affected (33)

Products: Tinymce: Spellchecker Php · Moodle: Moodle

1 product

1 product

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Tinymce Spellchecker Php	Version 2.0.1
Tinymce Spellchecker Php	Version 2.0.2
Tinymce Spellchecker Php	Version 2.0.3
Tinymce Spellchecker Php	Version 2.0.6
Tinymce Spellchecker Php	Version 2.0
Tinymce Spellchecker Php	Version 2.0 a1
Tinymce Spellchecker Php	Version 2.0 a2
Tinymce Spellchecker Php	Version 2.0 b1
Tinymce Spellchecker Php	Version 2.0 b2
Tinymce Spellchecker Php	Version 2.0 b3
Tinymce Spellchecker Php	Version 2.0 rc1

Configuration B

10 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.1.0
Moodle Moodle	Version 2.1.1
Moodle Moodle	Version 2.1.2
Moodle Moodle	Version 2.1.3
Moodle Moodle	Version 2.1.4
Moodle Moodle	Version 2.1.5
Moodle Moodle	Version 2.1.6
Moodle Moodle	Version 2.1.7
Moodle Moodle	Version 2.1.8
Moodle Moodle	Version 2.1.9

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.2.0
Moodle Moodle	Version 2.2.1
Moodle Moodle	Version 2.2.2
Moodle Moodle	Version 2.2.3
Moodle Moodle	Version 2.2.4
Moodle Moodle	Version 2.2.5
Moodle Moodle	Version 2.2.6