Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mahara mahara 15.04.9 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2017-1000153
Mahara 15.04 prior to 15.04.10 and 15.10 prior to 15.10.6 and 16.04 prior to 16.04.4 are vulnerable to incorrect access control after the password reset link is sent via email and then user changes default email, Mahara fails to invalidate old link.Consequently the link in email ...
Mahara Mahara 15.04Mahara Mahara 15.04.5Mahara Mahara 15.04.7Mahara Mahara 15.04.8Mahara Mahara 15.04.9Mahara Mahara 15.04.0Mahara Mahara 15.04.1Mahara Mahara 15.04.2Mahara Mahara 15.04.3Mahara Mahara 15.04.4Mahara Mahara 15.04.6Mahara Mahara 16.04Mahara Mahara 16.04.1Mahara Mahara 16.04.3Mahara Mahara 16.04.0Mahara Mahara 16.04.2Mahara Mahara 15.10.3Mahara Mahara 15.10.5Mahara Mahara 15.10.0Mahara Mahara 15.10.1Mahara Mahara 15.10.2Mahara Mahara 15.10.4
3.5
CVSSv2
CVE-2017-1000157
Mahara 15.04 prior to 15.04.13 and 16.04 prior to 16.04.7 and 16.10 prior to 16.10.4 and 17.04 prior to 17.04.2 are vulnerable to recording plain text passwords in the event_log table during the user creation process if full event logging was turned on.
Mahara Mahara 15.04.0Mahara Mahara 15.04.2Mahara Mahara 15.04.9Mahara Mahara 15.04.11Mahara Mahara 15.04Mahara Mahara 15.04.12Mahara Mahara 15.04.4Mahara Mahara 15.04.5Mahara Mahara 15.04.6Mahara Mahara 15.04.7Mahara Mahara 15.04.1Mahara Mahara 15.04.3Mahara Mahara 15.04.8Mahara Mahara 15.04.10Mahara Mahara 16.04.0Mahara Mahara 16.04.2Mahara Mahara 16.04Mahara Mahara 16.04.4Mahara Mahara 16.04.5Mahara Mahara 16.04.6Mahara Mahara 16.04.1Mahara Mahara 16.04.3
6.5
CVSSv2
CVE-2017-14163
An issue exists in Mahara prior to 15.04.14, 16.x prior to 16.04.8, 16.10.x prior to 16.10.5, and 17.x prior to 17.04.3. When one closes the browser without logging out of Mahara, the value in the usr_session table is not removed. If someone were to open a browser, visit the Maha...
Mahara Mahara 15.04.6Mahara Mahara 15.04.7Mahara Mahara 15.04.8Mahara Mahara 15.04.9Mahara Mahara 15.04.2Mahara Mahara 15.04.4Mahara Mahara 15.04.11Mahara Mahara 15.04.13Mahara Mahara 15.04Mahara Mahara 15.04.0Mahara Mahara 15.04.1Mahara Mahara 15.04.3Mahara Mahara 15.04.5Mahara Mahara 15.04.10Mahara Mahara 15.04.12Mahara Mahara 16.04.5Mahara Mahara 16.04.6Mahara Mahara 16.04.7Mahara Mahara 16.04.1Mahara Mahara 16.04.3Mahara Mahara 16.04Mahara Mahara 16.04.0
4.3
CVSSv2
CVE-2017-9551
Mahara 15.04 prior to 15.04.14 and 16.04 prior to 16.04.8 and 16.10 prior to 16.10.5 and 17.04 prior to 17.04.3 are vulnerable to a user submitting potential dangerous payload, e.g. XSS code, to be saved as their name in the usr_registration table. The values are then emailed to ...
Mahara Mahara 15.04.10Mahara Mahara 15.04.9Mahara Mahara 15.04.8Mahara Mahara 15.04.7Mahara Mahara 15.04Mahara Mahara 15.04.2Mahara Mahara 15.04.1Mahara Mahara 15.04.0Mahara Mahara 15.04.12Mahara Mahara 15.04.5Mahara Mahara 15.04.3Mahara Mahara 15.04.13Mahara Mahara 15.04.11Mahara Mahara 15.04.6Mahara Mahara 15.04.4Mahara Mahara 16.04.2Mahara Mahara 16.04.3Mahara Mahara 16.04.4Mahara Mahara 16.04.5Mahara Mahara 16.04.6Mahara Mahara 16.04Mahara Mahara 16.04.0
3.5
CVSSv2
CVE-2017-14752
Mahara 15.04 prior to 15.04.15, 16.04 prior to 16.04.9, 16.10 prior to 16.10.6, and 17.04 prior to 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as their first name, last name, or display name in the profile fields that can...
Mahara Mahara 15.04.1Mahara Mahara 15.04.2Mahara Mahara 15.04.3Mahara Mahara 15.04.4Mahara Mahara 15.04.14Mahara Mahara 15.04Mahara Mahara 15.04.6Mahara Mahara 15.04.8Mahara Mahara 15.04.13Mahara Mahara 15.04.9Mahara Mahara 15.04.10Mahara Mahara 15.04.11Mahara Mahara 15.04.12Mahara Mahara 15.04.0Mahara Mahara 15.04.5Mahara Mahara 15.04.7Mahara Mahara 16.04Mahara Mahara 16.04.0Mahara Mahara 16.04.1Mahara Mahara 16.04.2Mahara Mahara 16.04.8Mahara Mahara 16.04.4
3.5
CVSSv2
CVE-2017-15273
Mahara 15.04 prior to 15.04.15, 16.04 prior to 16.04.9, 16.10 prior to 16.10.6, and 17.04 prior to 17.04.4 are vulnerable to a user submitting a potential dangerous payload, e.g., XSS code, to be saved as titles in internal artefacts.
Mahara Mahara 15.04.15Mahara Mahara 15.04Mahara Mahara 15.04.0Mahara Mahara 15.04.13Mahara Mahara 15.04.2Mahara Mahara 15.04.4Mahara Mahara 15.04.9Mahara Mahara 15.04.11Mahara Mahara 15.04.5Mahara Mahara 15.04.6Mahara Mahara 15.04.7Mahara Mahara 15.04.8Mahara Mahara 15.04.1Mahara Mahara 15.04.3Mahara Mahara 15.04.10Mahara Mahara 15.04.12Mahara Mahara 16.04.8Mahara Mahara 16.04Mahara Mahara 16.04.0Mahara Mahara 16.04.2Mahara Mahara 16.04.3Mahara Mahara 16.04.4
5
CVSSv2
CVE-2017-1000151
Mahara 15.04 prior to 15.04.9 and 15.10 prior to 15.10.5 and 16.04 prior to 16.04.3 are vulnerable to passwords or other sensitive information being passed by unusual parameters to end up in an error log.
Mahara Mahara 15.04.3Mahara Mahara 15.04.5Mahara Mahara 15.04.6Mahara Mahara 15.04.7Mahara Mahara 15.04.8Mahara Mahara 15.04Mahara Mahara 15.04.0Mahara Mahara 15.04.1Mahara Mahara 15.04.2Mahara Mahara 15.04.4Mahara Mahara 16.04Mahara Mahara 16.04.0Mahara Mahara 16.04.2Mahara Mahara 16.04.1Mahara Mahara 15.10.3Mahara Mahara 15.10.0Mahara Mahara 15.10.1Mahara Mahara 15.10.2Mahara Mahara 15.10.4
5.5
CVSSv2
CVE-2017-1000156
Mahara 15.04 prior to 15.04.9 and 15.10 prior to 15.10.5 and 16.04 prior to 16.04.3 are vulnerable to a group's configuration page being editable by any group member even when they didn't have the admin role.
Mahara Mahara 15.04Mahara Mahara 15.04.3Mahara Mahara 15.04.5Mahara Mahara 15.04.7Mahara Mahara 15.04.8Mahara Mahara 15.04.0Mahara Mahara 15.04.1Mahara Mahara 15.04.2Mahara Mahara 15.04.4Mahara Mahara 15.04.6Mahara Mahara 16.04.0Mahara Mahara 16.04.2Mahara Mahara 16.04Mahara Mahara 16.04.1Mahara Mahara 15.10.0Mahara Mahara 15.10.1Mahara Mahara 15.10.2Mahara Mahara 15.10.3Mahara Mahara 15.10.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook