Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

http server project http server 1.0.12 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2019-15600
A Path traversal exists in http_server which allows an malicious user to read arbitrary system files.
Http Server Project Http Server 1.0.12
NA
CVE-2011-1402
Mahara prior to 1.3.6 allows remote authenticated users to bypass intended access restrictions, and suspend a user account, edit a view, visit a view, edit a plan artefact, read a plans block, read a plan artefact, edit a blog, read a blog block, read a blog artefact, or access a...
Mahara Mahara 1.1.2Mahara Mahara 1.0.5Mahara Mahara 1.0.8Mahara Mahara 0.9.1Mahara Mahara 1.0.1Mahara Mahara 1.1.0Mahara Mahara 1.2.6Mahara Mahara 1.3.0Mahara Mahara 1.1.9Mahara Mahara 1.1.4Mahara Mahara 1.1.7Mahara Mahara 1.1Mahara Mahara 1.2.2Mahara Mahara 1.2.0Mahara MaharaMahara Mahara 1.0.6Mahara Mahara 1.0.2Mahara Mahara 1.0.0Mahara Mahara 1.0.10Mahara Mahara 1.0.13Mahara Mahara 1.1.6Mahara Mahara 1.2.1
NA
CVE-2011-1403
Cross-site request forgery (CSRF) vulnerability in the pieforms implementation in Mahara prior to 1.3.6 allows remote malicious users to hijack the authentication of arbitrary users for requests to any form, related to inappropriate regeneration of session keys.
Mahara Mahara 1.0.6Mahara Mahara 1.1.1Mahara Mahara 1.0.0Mahara Mahara 1.0.4Mahara Mahara 1.0.10Mahara Mahara 1.3.1Mahara Mahara 1.3.0Mahara Mahara 1.1.0Mahara Mahara 1.1.6Mahara Mahara 1.1.5Mahara Mahara 1.2.0Mahara Mahara 1.0.14Mahara Mahara 1.2.1Mahara Mahara 0.9.0Mahara Mahara 1.2.3Mahara Mahara 1.2.5Mahara Mahara 1.0.8Mahara Mahara 1.0.7Mahara Mahara 1.0.1Mahara Mahara 0.9.2Mahara Mahara 1.2.6Mahara Mahara 1.1.4
NA
CVE-2011-1404
Mahara prior to 1.3.6 does not properly restrict the data in responses to AJAX calls, which allows remote authenticated users to obtain sensitive information via a request associated with (1) blocktype/myfriends/myfriends.json.php, (2) json/usersearch.php, (3) group/membersearchr...
Mahara Mahara 1.1.2Mahara Mahara 1.0.6Mahara Mahara 1.1.1Mahara Mahara 1.0.2Mahara Mahara 1.0.0Mahara Mahara 1.3.0Mahara Mahara 1.0.10Mahara Mahara 1.1.0Mahara Mahara 1.0.13Mahara Mahara 1.1.6Mahara Mahara 1.2.0Mahara Mahara 1.2.1Mahara Mahara 0.9.0Mahara Mahara 1.2.4Mahara Mahara 1.2.3Mahara Mahara 1.0.8Mahara Mahara 0.9.1Mahara Mahara 1.0.1Mahara Mahara 1.2.6Mahara Mahara 1.1.9Mahara Mahara 1.1.4Mahara Mahara 1.1.7
NA
CVE-2011-1405
Cross-site scripting (XSS) vulnerability in Mahara prior to 1.3.6 allows remote authenticated users to inject arbitrary web script or HTML via vectors associated with HTML e-mail messages, related to artefact/comment/lib.php and interaction/forum/lib.php.
Mahara Mahara 1.1.2Mahara Mahara 1.0.6Mahara Mahara 1.1.0Mahara Mahara 1.0.2Mahara Mahara 1.0.12Mahara Mahara 1.3.0Mahara Mahara 1.0.13Mahara Mahara 1.1.3Mahara Mahara 1.2.0Mahara Mahara 1.2.1Mahara Mahara 1.2.4Mahara Mahara 1.0.5Mahara Mahara 1.0.8Mahara Mahara 1.0.3Mahara Mahara 0.9.1Mahara Mahara 1.2.6Mahara Mahara 1.0.11Mahara Mahara 1.1.9Mahara Mahara 1.1.7Mahara Mahara 1.1Mahara Mahara 1.2.2Mahara Mahara 1.3.4
NA
CVE-2011-1406
Mahara prior to 1.3.6 does not properly handle an https URL in the wwwroot configuration setting, which makes it easier for user-assisted remote malicious users to obtain credentials by sniffing the network at a time when an http URL is used for a login.
Mahara Mahara 1.0.9Mahara Mahara 1.1.2Mahara Mahara 1.0.7Mahara Mahara 1.1.0Mahara Mahara 0.9.2Mahara Mahara 1.0.12Mahara Mahara 1.3.0Mahara Mahara 1.1.3Mahara Mahara 1.2.0Mahara Mahara 1.0.5Mahara Mahara 1.0.4Mahara Mahara 1.0.3Mahara Mahara 1.3.2Mahara Mahara 1.1.5Mahara Mahara 1.0.11Mahara Mahara 1.0.15Mahara Mahara 1.1.7Mahara Mahara 1.3.3Mahara Mahara 1.2.2Mahara Mahara 1.2.5Mahara Mahara 1.3.4Mahara Mahara 1.0.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook