CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-6112

classes/GoogleSpell.php in the PHP Spellchecker (aka Google Spellchecker) addon before 2.0.6.1 for TinyMCE, as used in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 and other products, does not properly handle control characters, which allows remote attackers to trigger arbitrary outbound HTTP requests via a crafted string.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 68.3%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2012-6112

Moodle » Moodle » Version: 2.1.0

cpe:2.3:a:moodle:moodle:2.1.0
Moodle » Moodle » Version: 2.1.1

cpe:2.3:a:moodle:moodle:2.1.1
Moodle » Moodle » Version: 2.1.2

cpe:2.3:a:moodle:moodle:2.1.2
Moodle » Moodle » Version: 2.1.3

cpe:2.3:a:moodle:moodle:2.1.3
Moodle » Moodle » Version: 2.1.4

cpe:2.3:a:moodle:moodle:2.1.4
Moodle » Moodle » Version: 2.1.5

cpe:2.3:a:moodle:moodle:2.1.5
Moodle » Moodle » Version: 2.1.6

cpe:2.3:a:moodle:moodle:2.1.6
Moodle » Moodle » Version: 2.1.7

cpe:2.3:a:moodle:moodle:2.1.7
Moodle » Moodle » Version: 2.1.8

cpe:2.3:a:moodle:moodle:2.1.8
Moodle » Moodle » Version: 2.1.9

cpe:2.3:a:moodle:moodle:2.1.9
Moodle » Moodle » Version: 2.2.0

cpe:2.3:a:moodle:moodle:2.2.0
Moodle » Moodle » Version: 2.2.1

cpe:2.3:a:moodle:moodle:2.2.1
Moodle » Moodle » Version: 2.2.2

cpe:2.3:a:moodle:moodle:2.2.2
Moodle » Moodle » Version: 2.2.3

cpe:2.3:a:moodle:moodle:2.2.3
Moodle » Moodle » Version: 2.2.4

cpe:2.3:a:moodle:moodle:2.2.4
Moodle » Moodle » Version: 2.2.5

cpe:2.3:a:moodle:moodle:2.2.5
Moodle » Moodle » Version: 2.2.6

cpe:2.3:a:moodle:moodle:2.2.6
Moodle » Moodle » Version: 2.3.0

cpe:2.3:a:moodle:moodle:2.3.0
Moodle » Moodle » Version: 2.3.1

cpe:2.3:a:moodle:moodle:2.3.1
Moodle » Moodle » Version: 2.3.2

cpe:2.3:a:moodle:moodle:2.3.2
Moodle » Moodle » Version: 2.3.3

cpe:2.3:a:moodle:moodle:2.3.3
Moodle » Moodle » Version: 2.4.0

cpe:2.3:a:moodle:moodle:2.4.0
Tinymce » Spellchecker Php » Version: 2.0

cpe:2.3:a:tinymce:spellchecker_php:2.0
Tinymce » Spellchecker Php » Version: 2.0.1

cpe:2.3:a:tinymce:spellchecker_php:2.0.1
Tinymce » Spellchecker Php » Version: 2.0.2

cpe:2.3:a:tinymce:spellchecker_php:2.0.2
Tinymce » Spellchecker Php » Version: 2.0.3

cpe:2.3:a:tinymce:spellchecker_php:2.0.3
Tinymce » Spellchecker Php » Version: 2.0.6

cpe:2.3:a:tinymce:spellchecker_php:2.0.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-6112

Products

Pricing

Contact Us