writeups.xyz / Pre-Auth RCE in Moodle Part I - PHP Object Injection in Shibboleth

Submitter : c2a

Date: 27 July 2021

Bounty : undisclosed

Vulnerabilities :

• RCE
• PHP Object Injection

Programs :

• Moodle

Authors :

• Johannes Moritz
• Robin Peraglie

Link :
https://haxolot.com/posts/2021/moodle_pre_auth_shibboleth_rce_part1/