Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mahara mahara 1.7. vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2
CVE-2013-4429
Mahara prior to 1.5.12, 1.6.x prior to 1.6.7, and 1.7.x prior to 1.7.3 does not properly restrict access to artefacts, which allows remote authenticated users to read arbitrary artefacts via the (1) artefact id in an upload action when creating a journal or (2) instconf_artefacti...
Mahara Mahara 1.5.0Mahara Mahara 1.5Mahara MaharaMahara Mahara 1.5.6Mahara Mahara 1.5.3Mahara Mahara 1.5.1Mahara Mahara 1.5.10Mahara Mahara 1.5.8Mahara Mahara 1.5.4Mahara Mahara 1.5.2Mahara Mahara 1.5.9Mahara Mahara 1.5.7Mahara Mahara 1.7.2Mahara Mahara 1.7.1Mahara Mahara 1.7.0Mahara Mahara 1.7.Mahara Mahara 1.6.5Mahara Mahara 1.6.4Mahara Mahara 1.6.3Mahara Mahara 1.6.2Mahara Mahara 1.6.1Mahara Mahara 1.6.0
4.3
CVSSv2
CVE-2013-4430
Cross-site scripting (XSS) vulnerability in Mahara prior to 1.5.12, 1.6.x prior to 1.6.7, and 1.7.x prior to 1.7.3 allows remote malicious users to inject arbitrary web script or HTML via the Host header to lib/web.php.
Mahara Mahara 1.7.Mahara Mahara 1.7.2Mahara Mahara 1.7.0Mahara Mahara 1.7.1Mahara Mahara 1.6.0Mahara Mahara 1.6.1Mahara Mahara 1.6.6Mahara Mahara 1.6.4Mahara Mahara 1.6.2Mahara Mahara 1.6.5Mahara Mahara 1.6.3Mahara Mahara 1.5.6Mahara Mahara 1.5.4Mahara Mahara 1.5.3Mahara Mahara 1.5Mahara MaharaMahara Mahara 1.5.10Mahara Mahara 1.5.9Mahara Mahara 1.5.2Mahara Mahara 1.5.0Mahara Mahara 1.5.7Mahara Mahara 1.5.1
5.5
CVSSv2
CVE-2013-4431
Mahara prior to 1.5.12, 1.6.x prior to 1.6.7, and 1.7.x prior to 1.7.3 does not properly prevent access to blocks, which allows remote authenticated users to modify arbitrary blocks via the bock id in an edit request.
Mahara Mahara 1.5.4Mahara Mahara 1.5.3Mahara Mahara 1.5.2Mahara Mahara 1.5.1Mahara Mahara 1.5.9Mahara Mahara 1.5.8Mahara Mahara 1.5.7Mahara Mahara 1.5.6Mahara Mahara 1.5.0Mahara Mahara 1.5Mahara Mahara 1.5.10Mahara MaharaMahara Mahara 1.7.2Mahara Mahara 1.7.0Mahara Mahara 1.7.1Mahara Mahara 1.7.Mahara Mahara 1.6.0Mahara Mahara 1.6.1Mahara Mahara 1.6.6Mahara Mahara 1.6.4Mahara Mahara 1.6.2Mahara Mahara 1.6.5
4
CVSSv2
CVE-2013-4432
Mahara prior to 1.5.13, 1.6.x prior to 1.6.8, and 1.7.x prior to 1.7.4 does not properly restrict access to folders, which allows remote authenticated users to read arbitrary folders (1) by leveraging an active folder tab loaded before permissions were removed or (2) via the fold...
Mahara Mahara 1.5.4Mahara Mahara 1.5.3Mahara Mahara 1.5.2Mahara Mahara 1.5.1Mahara Mahara 1.5.10Mahara Mahara 1.5.9Mahara Mahara 1.5.8Mahara Mahara 1.5.7Mahara Mahara 1.5.6Mahara MaharaMahara Mahara 1.5Mahara Mahara 1.5.11Mahara Mahara 1.5.0Mahara Mahara 1.6.6Mahara Mahara 1.6.5Mahara Mahara 1.6.4Mahara Mahara 1.6.3Mahara Mahara 1.6.2Mahara Mahara 1.6.0Mahara Mahara 1.6.7Mahara Mahara 1.6.1Mahara Mahara 1.7.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook