Skip to content

Tools Exploits Blog

Tools Exploits Blog

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Loading CVE intelligence

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Feeds Contact Privacy© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

Back to Exploits

CVE-2024-43425

HighPublished

Moodle: remote code execution via calculated question types

Published: Nov 7, 2024
Updated: Nov 7, 2024
Assigning CNA: fedora
Evidence observed: Jul 2, 2025

Primary CVSS

8.1/ 10High

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS probability estimate

87.5%

High · next 30 days

Percentile: 99.8%
Model date: Oct 17, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.

Sources

Repository evidence: Files: 2 · Repositories: 2

1 Module1 Template

Moodle Remote Code Execution (CVE-2024-43425)Module
modules/exploits/linux/http/moodle_rce.rb
Metasploit Framework modules
ExploitEvidence observed: Sep 26, 2026Revision: b22ce1fbae63Related tool
Declared conditions
- platform: Linux($.exploit_linux/http/moodle_rce.platform)
- verification: check_not_declared($.exploit_linux/http/moodle_rce.check)
Moodle - Remote Code ExecutionTemplate
http/cves/2024/CVE-2024-43425.yaml
Nuclei Templates
DetectionEvidence observed: Sep 26, 2026Revision: 008731b339bdRelated tool
Declared conditions
- network: http($.protocol_keys)
- verification: status,word($.matchers[*].type)
- oob: interactsh_reference($.template_text)

CVE-2024-43425-PocExploit
Proof-of-concept exploit for Moodle CVE-2024-43425, enabling authenticated RCE via crafted calculated questions. Automates login, token extraction, payload upload, and trigger for security testing.
Moodle-authenticated-RCEExploit
🚀 Exploit for Moodle 4.4.0 Authenticated RCE (CVE-2024-43425) — run commands remotely ⚡
cve-2024-43425Exploit
Detailed technical analysis and proof-of-concept exploit for CVE-2024-43425, a Moodle remote code execution vulnerability via calculated question formulas, including root cause and reproduction steps.
Moodle-CVE-2024-43425-ExploitExploit
Python exploit for Moodle RCE vulnerability CVE-2024-43425, enabling remote code execution on vulnerable Moodle instances for authorized security testing.
moodle-rce-calculatedquestionsExploit
Scripts for Analysis of a RCE in Moodle Calculated Questions (CVE-2024-43425)
Moodle 4.4.0 - Authenticated Remote Code ExecutionExploit
Likhith Appalaneni · multiple · Jul 2, 2025

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.