Moodle CVE-2016-5013 Arbitrary Code Execution Vulnerability

Description

By changing own name user can inject arbitrary email addresses in the emails that moodle sends to him/her. This can be used to send spam when moodle emails user content such as messages and forum posts. It can only be exploited by registered users and very easy to trace and find the attacker.

Affected Applications

Moodle

CVE References

Other References