CVE-2010-1614

Vulnerability

Moodle versions 1.8.x before 1.8.12 and 1.9.x before 1.9.8 contain multiple cross-site scripting (XSS) vulnerabilities [1]. The issues exist in the Login-As feature (vector 1) and, when the global search feature is enabled, in unspecified global search forms of the Global Search Engine (vector 2) [1]. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML [1]. Note that vector 1 might be resultant from a cross-site request forgery (CSRF) vulnerability [1].

Exploitation

An attacker can exploit these XSS vulnerabilities without requiring authentication [1]. For the Login-As vector, the attacker may need to trick a privileged user into performing a CSRF action to trigger the XSS [1]. For the global search vector, the global search feature must be enabled on the Moodle instance [1]. The attacker then crafts malicious input that, when processed by the vulnerable forms, executes arbitrary script in the context of the victim's browser [1].

Impact

Successful exploitation allows the attacker to execute arbitrary web script or HTML in the victim's browser session [1]. This can lead to session hijacking, defacement, credential theft, or other actions performed as the victim user within Moodle [1]. The impact is limited by the victim's privileges and the scope of the XSS [1].

Mitigation

Moodle has fixed these vulnerabilities in versions 1.8.12 and 1.9.8 [1]. Administrators should upgrade to these or later versions immediately [1]. No workarounds are documented in the available references [1]. The Login-As feature and global search functionality should be evaluated for additional security measures [1].