mahara mahara 15.04.7 vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv3

Mahara 15.04 prior to 15.04.8 and 15.10 prior to 15.10.4 and 16.04 prior to 16.04.2 are vulnerable to users staying logged in to their Mahara account even when they have been logged out of Moodle (when using MNet) as Mahara did not properly implement one of the MNet SSO API funct...

Mahara Mahara 15.04 Mahara Mahara 15.04.6 Mahara Mahara 15.04.7 Mahara Mahara 15.04.3 Mahara Mahara 15.04.5 Mahara Mahara 15.04.0 Mahara Mahara 15.04.1 Mahara Mahara 15.04.2 Mahara Mahara 15.04.4 Mahara Mahara 16.04 Mahara Mahara 16.04.1 Mahara Mahara 16.04.0 Mahara Mahara 15.10.0 Mahara Mahara 15.10.1 Mahara Mahara 15.10.2 Mahara Mahara 15.10.3

8.8

CVSSv3

Mahara 15.04 prior to 15.04.8 and 15.10 prior to 15.10.4 and 16.04 prior to 16.04.2 are vulnerable to PHP code execution as Mahara would pass portions of the XML through the PHP "unserialize()" function when importing a skin from an XML file.

Mahara Mahara 15.04.2 Mahara Mahara 15.04.3 Mahara Mahara 15.04.4 Mahara Mahara 15.04.5 Mahara Mahara 15.04 Mahara Mahara 15.04.1 Mahara Mahara 15.04.6 Mahara Mahara 15.04.0 Mahara Mahara 15.04.7 Mahara Mahara 16.04 Mahara Mahara 16.04.0 Mahara Mahara 16.04.1 Mahara Mahara 15.10.1 Mahara Mahara 15.10.3 Mahara Mahara 15.10.0 Mahara Mahara 15.10.2

9.8

CVSSv3

Mahara 15.04 prior to 15.04.8 and 15.10 prior to 15.10.4 and 16.04 prior to 16.04.2 are vulnerable to some authentication methods, which do not use Mahara's built-in login form, still allowing users to log in even if their institution was expired or suspended.

Mahara Mahara 15.04.1 Mahara Mahara 15.04.3 Mahara Mahara 15.04 Mahara Mahara 15.04.4 Mahara Mahara 15.04.5 Mahara Mahara 15.04.6 Mahara Mahara 15.04.7 Mahara Mahara 15.04.0 Mahara Mahara 15.04.2 Mahara Mahara 16.04 Mahara Mahara 16.04.1 Mahara Mahara 16.04.0 Mahara Mahara 15.10.3 Mahara Mahara 15.10.0 Mahara Mahara 15.10.1 Mahara Mahara 15.10.2

4.3

CVSSv3

Mahara 15.04 prior to 15.04.8 and 15.10 prior to 15.10.4 and 16.04 prior to 16.04.2 are vulnerable to profile pictures being accessed without any access control checks consequently allowing any of a user's uploaded profile pictures to be viewable by anyone, whether or not th...

Mahara Mahara 15.04 Mahara Mahara 15.04.4 Mahara Mahara 15.04.6 Mahara Mahara 15.04.0 Mahara Mahara 15.04.1 Mahara Mahara 15.04.2 Mahara Mahara 15.04.3 Mahara Mahara 15.04.5 Mahara Mahara 15.04.7 Mahara Mahara 16.04 Mahara Mahara 16.04.0 Mahara Mahara 16.04.1 Mahara Mahara 15.10.1 Mahara Mahara 15.10.3 Mahara Mahara 15.10.0 Mahara Mahara 15.10.2

7.5

CVSSv3

Mahara 15.04 prior to 15.04.8 and 15.10 prior to 15.10.4 and 16.04 prior to 16.04.2 are vulnerable to a user - in some circumstances causing another user's artefacts to be included in a Leap2a export of their own pages.

Mahara Mahara 15.04.0 Mahara Mahara 15.04.2 Mahara Mahara 15.04.3 Mahara Mahara 15.04.4 Mahara Mahara 15.04.5 Mahara Mahara 15.04.6 Mahara Mahara 15.04.7 Mahara Mahara 15.04 Mahara Mahara 15.04.1 Mahara Mahara 16.04 Mahara Mahara 16.04.0 Mahara Mahara 16.04.1 Mahara Mahara 15.10.2 Mahara Mahara 15.10.0 Mahara Mahara 15.10.1 Mahara Mahara 15.10.3

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook