{"id":"GHSA-wxqg-fg7v-mmc6","aliases":["CVE-2013-3630"],"title":"Moodle  Authenticated Spelling Binary Remote Code Execution","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.","severity":"medium","score":null,"published":"2022-05-13T01:05:39.000Z","modified":"2024-12-02T05:46:46.269Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"moodle/moodle","sources":[{"name":"OSV · GHSA-wxqg-fg7v-mmc6","url":"https://osv.dev/vulnerability/GHSA-wxqg-fg7v-mmc6"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"2.5.3"}],"type":"ECOSYSTEM"}],"versions":["v2.3.10","v2.3.11","v2.3.4","v2.3.5","v2.3.6","v2.3.7","v2.3.8","v2.3.9","v2.4.0","v2.4.0-rc1","v2.4.1","v2.4.10","v2.4.11","v2.4.2","v2.4.3","v2.4.4","v2.4.5","v2.4.6","v2.4.7","v2.4.8","v2.4.9","v2.5.0","v2.5.0-beta","v2.5.0-rc1","v2.5.1","v2.5.2"],"fixed":["2.5.3"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2013-3630","https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-foss-disclosures-part-one","https://community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats","https://github.com/moodle/moodle","http://packetstormsecurity.com/files/164479/Moodle-Authenticated-Spelling-Binary-Remote-Code-Execution.html"],"sources":[{"name":"OSV","id":"GHSA-wxqg-fg7v-mmc6","modified":"2024-12-02T05:46:46.269302Z","url":"https://osv.dev/vulnerability/GHSA-wxqg-fg7v-mmc6"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-29T03:30:33.923Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[{"source":"Exploit-DB","id":"29324","url":"https://www.exploit-db.com/exploits/29324","checkedAt":"2026-10-29T00:00:35.338Z"}]}