{"vulnerability": "CVE-2019-11631", "sightings": [{"uuid": "c726cec8-530b-4ca9-a9d8-05e57bbf375d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11631", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "27224b70-4a6b-4213-a4f3-ed9736158d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11631", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:11.000000Z"}, {"uuid": "f440f523-2aa5-4241-96ce-0942fa3c74ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11631", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/moodle_admin_shell_upload.rb", "content": "", "creation_timestamp": "2021-10-11T22:36:30.000000Z"}, {"uuid": "f7bfd4e4-0304-4be3-b715-9a43b59f7082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11631", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/865", "content": "CVE-2019-11631 Moodle Admin Shell Upload\nhttps://www.pwnwiki.org/index.php?title=CVE-2019-11631_Moodle_Admin_Shell_Upload", "creation_timestamp": "2021-10-13T01:51:36.000000Z"}, {"uuid": "44f01997-f9a1-47e5-bd76-d0299d121695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11631", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/moodle_admin_shell_upload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"AkkuS <\\u00d6zkan Mustafa Akku\\u015f>\", \"h00die\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module will generate a plugin which can receive a malicious\\n          payload request and upload it to a server running Moodle\\n          provided valid admin credentials are used.  Then the payload\\n          is sent for execution, and the plugin uninstalled.\\n\\n          You must have an admin account to exploit this vulnerability.\\n\\n          Successfully tested against 3.6.3, 3.8.0, 3.9.0, 3.10.0, 3.11.2\", \"disclosure_date\": \"2019-04-28\", \"fullname\": \"exploit/multi/http/moodle_admin_shell_upload\", \"is_install_path\": true, \"mod_time\": \"2021-10-11 16:23:09 +0000\", \"name\": \"Moodle Admin Shell Upload\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"config-changes\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/moodle_admin_shell_upload.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/moodle_admin_shell_upload\", \"references\": [\"URL-http://pentest.com.tr/exploits/Moodle-3-6-3-Install-Plugin-Remote-Command-Execution.html\", \"EDB-46775\", \"CVE-2019-11631\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:03.466298Z"}]}