SecuritySpace - CVE-2015-3178

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-3178

Description: Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML into an external application via a crafted string that is visible to web services.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-3178
BugTraq ID: 74726
http://www.securityfocus.com/bid/74726
http://openwall.com/lists/oss-security/2015/05/18/1
http://www.securitytracker.com/id/1032358

CVE ID:	CVE-2015-3178
Description:	Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML into an external application via a crafted string that is visible to web services.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3178 BugTraq ID: 74726 http://www.securityfocus.com/bid/74726 http://openwall.com/lists/oss-security/2015/05/18/1 http://www.securitytracker.com/id/1032358