VDB
GCVE-110-MAGEIA-2015-57
GCVE-110-MAGEIA-2015-57
Advisory Published
Updated moodle package fixes security vulnerability:
In Moodle before 2.6.8, parameter "file" passed to scripts serving JS was not
always cleaned from including "../" in the path, allowing to read files
located outside of moodle directory. All OS's are affected, but especially
vulnerable are Windows servers (CVE-2015-1493).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | moodle | 0 (affected), 2.6.8-1.mga4 (unaffected), 0 (affected), 2.6.8-1.mga4 (unaffected) | — |
| Mageia | get_iplayer | 0 (affected), 2.94-1.mga5 (unaffected) | — |
Aliases
References
Browse GCVE Records
73,393 records in the GCVE database · Updated July 17, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.