pentester.land· Jan 10, 2022· by Johannes Moritz, Robin Peraglie

Pre-Auth RCE in Moodle Part II - Session Hijack in Moodle's Shibboleth

Open Original Article ↗
Target Program: Moodle
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#Session hijacking#Session management issue#Account takeover#RCE