Summary

In this post, we aim to understand an SQLi exploit for Moodle and demystify some of the unknowns that the public exploit sources leave out. That makes the currently discussed exploit more viable and feasible to be used during your next pentest engagements.

Script link

Moodle 3.11.4 - SQL Injection

Moodle 3.11.4 - SQL Injection. CVE-2022-0332 . webapps exploit for PHP platform

Description