VDB
GCVE-110-MAGEIA-2015-57
GCVE-110-MAGEIA-2015-57
Advisory Published
Updated moodle package fixes security vulnerability:
In Moodle before 2.6.8, parameter "file" passed to scripts serving JS was not
always cleaned from including "../" in the path, allowing to read files
located outside of moodle directory. All OS's are affected, but especially
vulnerable are Windows servers (CVE-2015-1493).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | moodle | 0 (affected), 2.6.8-1.mga4 (unaffected) | — |
Browse GCVE Records
20,323 records in the GCVE database · Updated October 20, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.