CVE-2014-3541

High

Published: 29/07/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

The Repositories component in Moodle through 2.3.11, and in versions 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary code via serialized data associated with an add-on.

Risk Assessment

Attackers can exploit this vulnerability to execute arbitrary code remotely, potentially gaining control over the Moodle system and accessing sensitive data.

Recommendation

It is recommended to update Moodle to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.

Other vulnerabilities in Repositories

CVE-2026-66375High
A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions.

Original NVD description (English source)

The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary code via serialized data associated with an add-on.