CVE-2013-3630: Moodle Authenticated Spelling Binary Remote Code Execution

CVE-2013-3630 PUBLISHED CVSS 4.599999904632568 MEDIUM

Moodle Authenticated Spelling Binary Remote Code Execution

Reported by certcc · Published November 1, 2013

Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.

Risk scores

CVSS 2.0

4.599999904632568

Affected products

Vendor	Product	Versions
n/a	n/a	n/a
n/a	n/a	*
moodle	moodle	0

Timeline

Oct 31, 2013 PoC Published (6 in total, the first dated here)
Nov 1, 2013 CVE Published
Feb 4, 2022 EPSS Score (30 in total, the first dated here)
Apr 11, 2025 CVE Updated
Mar 17, 2026 Security Advisory
Oct 24, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2013-3630
vulnetix vdb fixes CVE-2013-3630

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2013-3630/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

x_refsource_MISC
x_refsource_MISC
x_refsource_MISC
https://github.com/advisories/GHSA-wxqg-fg7v-mmc6 advisory
https://nvd.nist.gov/vuln/detail/CVE-2013-3630 advisory

Look up in the Resolve Platform →