CVE-2013-3630
Moodle Authenticated Spelling Binary Remote Code Execution
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.
Exploit likelihood
What each source reports
NVD Score used
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.
- Record
CVE-2013-3630- CVSS 2.0
- 4.6 Medium
AV:N/AC:H/Au:S/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.
- Record
CVE-2013-3630- Updated
- 2026-11-02
EUVDEUVD-2022-5672 No score
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.
- Record
EUVD-2022-5672- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wxqg-fg7v-mmc6 No score
Moodle Authenticated Spelling Binary Remote Code Execution
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.
- Record
GHSA-wxqg-fg7v-mmc6- Weakness
- CWE-94
- Updated
- 2026-11-02
OSVGHSA-wxqg-fg7v-mmc6 No score
Moodle Authenticated Spelling Binary Remote Code Execution
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.
- Record
GHSA-wxqg-fg7v-mmc6- Weakness
- CWE-94
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-3630 No score
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor.
- Record
UBUNTU-CVE-2013-3630- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
moodle/moodlePackagist |
through 2.5.2 | 2.5.3 |
moodle/moodlePackagist |
before 2.5.3, plus listed versions v2.3.10v2.3.11v2.3.4v2.3.5v2.3.6 Show 21 moreShow lessv2.3.7v2.3.8v2.3.9v2.4.0v2.4.0-rc1v2.4.1v2.4.10v2.4.11v2.4.2v2.4.3v2.4.4v2.4.5v2.4.6v2.4.7v2.4.8v2.4.9v2.5.0v2.5.0-betav2.5.0-rc1v2.5.1v2.5.2 |
2.5.3 |
moodleUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.7.9+dfsg-12.7.10+dfsg-12.7.11+dfsg-12.7.11+dfsg-22.7.12+dfsg-13.0.3+dfsg-0ubuntu13.0.3+dfsg-0ubuntu1+esm1 |
None known |
moodleUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 3.0.3+dfsg-0ubuntu13.0.3+dfsg-0ubuntu1+esm1 |
None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Moodle - Remote Command Execution (Metasploit) | 2013-10-31 |
| Metasploit | Moodle Authenticated Spelling Binary RCE | 2013-10-30 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-3630 is a medium vulnerability (CVSS 4.6) in Moodle, published November 1, 2013. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 41.7%, the 98th percentile. Fixed in moodle/moodle 2.5.3.
References
community.rapid7.com/community/metasploit/blog/2013/10/30/seven-tricks-and-treats
packetstormsecurity.com/files/164479/Moodle-Authenticated-Spelling-Binary-Remote-Code-Execution.html
nvd.nist.gov/vuln/detail/CVE-2013-3630
github.com/advisories/GHSA-wxqg-fg7v-mmc6
ubuntu.com/security/CVE-2013-3630
tracker.moodle.org/browse/MDL-41449
cve.org/CVERecord?id=CVE-2013-3630