{"id":2470,"date":"2017-08-09T17:39:36","date_gmt":"2017-08-09T21:39:36","guid":{"rendered":"https:\/\/news.elearninginside.com\/?p=2470"},"modified":"2019-06-10T11:32:00","modified_gmt":"2019-06-10T15:32:00","slug":"moodle-lms-security-leaves-1000s-servers-vulnerable","status":"publish","type":"post","link":"https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/","title":{"rendered":"Moodle LMS security leaves 1000&#8217;s of servers vulnerable"},"content":{"rendered":"<p><strong><span style=\"color: #ff0000;\">Breaking news from TechTarget:<\/span><\/strong><\/p>\n<h2 class=\"main-article-subtitle\">A series of logic flaws in Moodle enabled attackers to remotely execute code on servers. Expert Michael Cobb explains how the Moodle security vulnerability can be exploited.<\/h2>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-2471\" src=\"https:\/\/news.elearninginside.com\/wp-content\/uploads\/2017\/08\/moodle-learning-management-system-300x208.jpg\" alt=\"Moodle lms security vulnerability\" width=\"300\" height=\"208\" srcset=\"https:\/\/news.elearninginside.com\/wp-content\/uploads\/2017\/08\/moodle-learning-management-system-300x208.jpg 300w, https:\/\/news.elearninginside.com\/wp-content\/uploads\/2017\/08\/moodle-learning-management-system-768x532.jpg 768w, https:\/\/news.elearninginside.com\/wp-content\/uploads\/2017\/08\/moodle-learning-management-system-90x63.jpg 90w, https:\/\/news.elearninginside.com\/wp-content\/uploads\/2017\/08\/moodle-learning-management-system.jpg 794w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/p>\n<p><b>A vulnerability found in Moodle, an open source, PHP-based learning management system used by tens of thousands of universities internationally, left servers and their data open to compromise. According to the researcher that discovered the issue, the Moodle security vulnerability is actually made up of several small flaws, and it can enable attackers to execute PHP code on related servers. What does this vulnerability entail, and what can be done about it?<\/b><\/p>\n<p>Netanel Rubin, security researcher and CEO of Vaultra, found that by exploiting a series of minor vulnerabilities, he could chain them together to remotely execute code on a server running Moodle.<\/p>\n<p>Read the rest of this story at <a href=\"http:\/\/searchsecurity.techtarget.com\/answer\/How-did-a-Moodle-security-vulnerability-enable-remote-code-execution\" target=\"_blank\" rel=\"noopener noreferrer\">TechTarget<\/a> (registration required).<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Moodle learning management system huge security flaw leaves 1000&#8217;s of servers vulnerable to hacks. Learn how to patch you Moodle installation to prevent hack attacks.<\/p>\n","protected":false},"author":1,"featured_media":2472,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[6],"tags":[],"class_list":["post-2470","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-editors-picks"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Moodle LMS security leaves 1000&#039;s of servers vulnerable - eLearningInside News<\/title>\n<meta name=\"description\" content=\"Moodle LMS security vulnerability leaves 1000s of server vulnerable to hacks. Learn you can patch your Moodle LMS server.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Moodle LMS security leaves 1000&#039;s of servers vulnerable - eLearningInside News\" \/>\n<meta property=\"og:description\" content=\"Moodle LMS security vulnerability leaves 1000s of server vulnerable to hacks. Learn you can patch your Moodle LMS server.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/\" \/>\n<meta property=\"og:site_name\" content=\"eLearningInside News\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/elearninginside\/\" \/>\n<meta property=\"article:published_time\" content=\"2017-08-09T21:39:36+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-06-10T15:32:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/news.elearninginside.com\/wp-content\/uploads\/2017\/08\/moodle-security-lms.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1500\" \/>\n\t<meta property=\"og:image:height\" content=\"965\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"eLearning Inside\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@elearninginside\" \/>\n<meta name=\"twitter:site\" content=\"@elearninginside\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"eLearning Inside\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/news.elearninginside.com\\\/moodle-lms-security-leaves-1000s-servers-vulnerable\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/news.elearninginside.com\\\/moodle-lms-security-leaves-1000s-servers-vulnerable\\\/\"},\"author\":{\"name\":\"eLearning Inside\",\"@id\":\"https:\\\/\\\/news.elearninginside.com\\\/#\\\/schema\\\/person\\\/8b892d3cea292b65f4d19edef13bb275\"},\"headline\":\"Moodle LMS security leaves 1000&#8217;s of servers vulnerable\",\"datePublished\":\"2017-08-09T21:39:36+00:00\",\"dateModified\":\"2019-06-10T15:32:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/news.elearninginside.com\\\/moodle-lms-security-leaves-1000s-servers-vulnerable\\\/\"},\"wordCount\":152,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/news.elearninginside.com\\\/moodle-lms-security-leaves-1000s-servers-vulnerable\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/news.elearninginside.com\\\/wp-content\\\/uploads\\\/2017\\\/08\\\/moodle-security-lms.jpg\",\"articleSection\":[\"Editor\u2019s Picks\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/news.elearninginside.com\\\/moodle-lms-security-leaves-1000s-servers-vulnerable\\\/#respond\"]}],\"copyrightYear\":\"2017\",\"copyrightHolder\":{\"@id\":\"https:\\\/\\\/news.elearninginside.com\\\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/news.elearninginside.com\\\/moodle-lms-security-leaves-1000s-servers-vulnerable\\\/\",\"url\":\"https:\\\/\\\/news.elearninginside.com\\\/moodle-lms-security-leaves-1000s-servers-vulnerable\\\/\",\"name\":\"Moodle LMS security leaves 1000's of servers vulnerable - eLearningInside News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/news.elearninginside.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/news.elearninginside.com\\\/moodle-lms-security-leaves-1000s-servers-vulnerable\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/news.elearninginside.com\\\/moodle-lms-security-leaves-1000s-servers-vulnerable\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/news.elearninginside.com\\\/wp-content\\\/uploads\\\/2017\\\/08\\\/moodle-security-lms.jpg\",\"datePublished\":\"2017-08-09T21:39:36+00:00\",\"dateModified\":\"2019-06-10T15:32:00+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/news.elearninginside.com\\\/#\\\/schema\\\/person\\\/8b892d3cea292b65f4d19edef13bb275\"},\"description\":\"Moodle LMS security vulnerability leaves 1000s of server vulnerable to hacks. Learn you can patch your Moodle LMS server.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/news.elearninginside.com\\\/moodle-lms-security-leaves-1000s-servers-vulnerable\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/news.elearninginside.com\\\/moodle-lms-security-leaves-1000s-servers-vulnerable\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/news.elearninginside.com\\\/moodle-lms-security-leaves-1000s-servers-vulnerable\\\/#primaryimage\",\"url\":\"https:\\\/\\\/news.elearninginside.com\\\/wp-content\\\/uploads\\\/2017\\\/08\\\/moodle-security-lms.jpg\",\"contentUrl\":\"https:\\\/\\\/news.elearninginside.com\\\/wp-content\\\/uploads\\\/2017\\\/08\\\/moodle-security-lms.jpg\",\"width\":1500,\"height\":965},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/news.elearninginside.com\\\/moodle-lms-security-leaves-1000s-servers-vulnerable\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/news.elearninginside.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Moodle LMS security leaves 1000&#8217;s of servers vulnerable\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/news.elearninginside.com\\\/#website\",\"url\":\"https:\\\/\\\/news.elearninginside.com\\\/\",\"name\":\"eLearningInside News\",\"description\":\"News for eLearning\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/news.elearninginside.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/news.elearninginside.com\\\/#\\\/schema\\\/person\\\/8b892d3cea292b65f4d19edef13bb275\",\"name\":\"eLearning Inside\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e7e4c9e3a9803201159f8b9c0beab38ccdf65d56a843805b3679d15ec35d76a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e7e4c9e3a9803201159f8b9c0beab38ccdf65d56a843805b3679d15ec35d76a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/4e7e4c9e3a9803201159f8b9c0beab38ccdf65d56a843805b3679d15ec35d76a?s=96&d=mm&r=g\",\"caption\":\"eLearning Inside\"},\"sameAs\":[\"https:\\\/\\\/news.elearninginside.com\\\/\"],\"url\":\"https:\\\/\\\/news.elearninginside.com\\\/author\\\/ne_admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Moodle LMS security leaves 1000's of servers vulnerable - eLearningInside News","description":"Moodle LMS security vulnerability leaves 1000s of server vulnerable to hacks. Learn you can patch your Moodle LMS server.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/","og_locale":"en_US","og_type":"article","og_title":"Moodle LMS security leaves 1000's of servers vulnerable - eLearningInside News","og_description":"Moodle LMS security vulnerability leaves 1000s of server vulnerable to hacks. Learn you can patch your Moodle LMS server.","og_url":"https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/","og_site_name":"eLearningInside News","article_publisher":"https:\/\/www.facebook.com\/elearninginside\/","article_published_time":"2017-08-09T21:39:36+00:00","article_modified_time":"2019-06-10T15:32:00+00:00","og_image":[{"width":1500,"height":965,"url":"https:\/\/news.elearninginside.com\/wp-content\/uploads\/2017\/08\/moodle-security-lms.jpg","type":"image\/jpeg"}],"author":"eLearning Inside","twitter_card":"summary_large_image","twitter_creator":"@elearninginside","twitter_site":"@elearninginside","twitter_misc":{"Written by":"eLearning Inside","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/#article","isPartOf":{"@id":"https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/"},"author":{"name":"eLearning Inside","@id":"https:\/\/news.elearninginside.com\/#\/schema\/person\/8b892d3cea292b65f4d19edef13bb275"},"headline":"Moodle LMS security leaves 1000&#8217;s of servers vulnerable","datePublished":"2017-08-09T21:39:36+00:00","dateModified":"2019-06-10T15:32:00+00:00","mainEntityOfPage":{"@id":"https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/"},"wordCount":152,"commentCount":0,"image":{"@id":"https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/#primaryimage"},"thumbnailUrl":"https:\/\/news.elearninginside.com\/wp-content\/uploads\/2017\/08\/moodle-security-lms.jpg","articleSection":["Editor\u2019s Picks"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/#respond"]}],"copyrightYear":"2017","copyrightHolder":{"@id":"https:\/\/news.elearninginside.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/","url":"https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/","name":"Moodle LMS security leaves 1000's of servers vulnerable - eLearningInside News","isPartOf":{"@id":"https:\/\/news.elearninginside.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/#primaryimage"},"image":{"@id":"https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/#primaryimage"},"thumbnailUrl":"https:\/\/news.elearninginside.com\/wp-content\/uploads\/2017\/08\/moodle-security-lms.jpg","datePublished":"2017-08-09T21:39:36+00:00","dateModified":"2019-06-10T15:32:00+00:00","author":{"@id":"https:\/\/news.elearninginside.com\/#\/schema\/person\/8b892d3cea292b65f4d19edef13bb275"},"description":"Moodle LMS security vulnerability leaves 1000s of server vulnerable to hacks. Learn you can patch your Moodle LMS server.","breadcrumb":{"@id":"https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/#primaryimage","url":"https:\/\/news.elearninginside.com\/wp-content\/uploads\/2017\/08\/moodle-security-lms.jpg","contentUrl":"https:\/\/news.elearninginside.com\/wp-content\/uploads\/2017\/08\/moodle-security-lms.jpg","width":1500,"height":965},{"@type":"BreadcrumbList","@id":"https:\/\/news.elearninginside.com\/moodle-lms-security-leaves-1000s-servers-vulnerable\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/news.elearninginside.com\/"},{"@type":"ListItem","position":2,"name":"Moodle LMS security leaves 1000&#8217;s of servers vulnerable"}]},{"@type":"WebSite","@id":"https:\/\/news.elearninginside.com\/#website","url":"https:\/\/news.elearninginside.com\/","name":"eLearningInside News","description":"News for eLearning","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/news.elearninginside.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/news.elearninginside.com\/#\/schema\/person\/8b892d3cea292b65f4d19edef13bb275","name":"eLearning Inside","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/4e7e4c9e3a9803201159f8b9c0beab38ccdf65d56a843805b3679d15ec35d76a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/4e7e4c9e3a9803201159f8b9c0beab38ccdf65d56a843805b3679d15ec35d76a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4e7e4c9e3a9803201159f8b9c0beab38ccdf65d56a843805b3679d15ec35d76a?s=96&d=mm&r=g","caption":"eLearning Inside"},"sameAs":["https:\/\/news.elearninginside.com\/"],"url":"https:\/\/news.elearninginside.com\/author\/ne_admin\/"}]}},"_links":{"self":[{"href":"https:\/\/news.elearninginside.com\/wp-json\/wp\/v2\/posts\/2470","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/news.elearninginside.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news.elearninginside.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news.elearninginside.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news.elearninginside.com\/wp-json\/wp\/v2\/comments?post=2470"}],"version-history":[{"count":0,"href":"https:\/\/news.elearninginside.com\/wp-json\/wp\/v2\/posts\/2470\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news.elearninginside.com\/wp-json\/wp\/v2\/media\/2472"}],"wp:attachment":[{"href":"https:\/\/news.elearninginside.com\/wp-json\/wp\/v2\/media?parent=2470"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news.elearninginside.com\/wp-json\/wp\/v2\/categories?post=2470"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news.elearninginside.com\/wp-json\/wp\/v2\/tags?post=2470"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}