CVE-2024-43425 PoC — Moodle: remote code execution via calculated question types

Source

Associated Vulnerability

Description

🚀 Exploit for Moodle 4.4.0 Authenticated RCE (CVE-2024-43425) — run commands remotely ⚡

Readme

# Moodle 4.4.0 - Authenticated Remote Code Execution (CVE-2024-43425) Exploit
**CVE:** CVE-2024-43425

---

## Affected Versions
- Moodle 4.4 to 4.4.1  
- Moodle 4.3 to 4.3.5  
- Moodle 4.2 to 4.2.8  
- Moodle 4.1 to 4.1.11

---

## Description
This exploit targets an authenticated Remote Code Execution (RCE) vulnerability in Moodle versions listed above. It allows an attacker with valid credentials to execute arbitrary commands on the server by exploiting insecure question bank editing functionality.

---

## Usage
1. Clone or download this repository.  
2. Install required dependencies:
   ```
   pip install -r requirements.txt
   
   ```
3. Run the exploit script:
   ```
    python exploit.py --url http://target_moodle_url --username your_username --password your_password --cmd "whoami"
   
   ```
   

---

## 🖼️ Screenshot

![Sample Output](./images/Screenshot.png)

---

## Disclaimer
This exploit is provided for educational and authorized testing purposes only. Unauthorized use against systems you do not own or have explicit permission to test is illegal and unethical.

---

File Snapshot

 [4.0K]  /data/pocs/430c6748bfcee51167fac493660d6579fab59c19
├── [8.1K]  app.py
├── [4.0K]  images
│   └── [ 96K]  Screenshot.png
├── [1.1K]  README.md
└── [  17]  requirements.txt

1 directory, 4 files

Remarks