CVE-2018-1133 PoC — Moodle 代码注入漏洞

Source

https://github.com/That-Guy-Steve/CVE-2018-1133-Exploit

Associated Vulnerability

Title:Moodle 代码注入漏洞 (CVE-2018-1133)
Description:An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval injection.

Readme

# CVE-2018-1133-Exploit
This repository contains a python exploit script for the Moodle Evil Teacher exploit (CVE-2018-1133).

## Usage
```
usage: Moodle Evil Teacher Exploit [-h] -u URL -l LOGIN -p PASSWORD -c COMMAND [-P PROXY]

options:
  -h, --help            show this help message and exit
  -u URL, --url URL     Target URL
  -l LOGIN, --login LOGIN
                        Login username
  -p PASSWORD, --password PASSWORD
                        Login password
  -c COMMAND, --command COMMAND
                        Command to execute (Note: this is blind so maybe try a reverse shell or something)
  -P PROXY, --proxy PROXY
                        Proxy (optional)
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →