Published: 23/04/2009 Updated: 29/04/2009

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0.x prior to 1.0.11 and 1.1.x prior to 1.1.3 allow remote malicious users to inject arbitrary web script or HTML via (1) the introduction field in a user profile or (2) an arbitrary text block in a user view.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mahara mahara 1.0.5
mahara mahara 1.0.8
mahara mahara 1.0.1
mahara mahara 1.1.0
mahara mahara 1.1.1
mahara mahara 1.0.0
mahara mahara 1.0.4
mahara mahara 1.0.7
mahara mahara 1.0.2
mahara mahara 1.1.2
mahara mahara 1.0.9
mahara mahara 1.0.6
mahara mahara 1.0.3
mahara mahara 1.0.10

It was discovered that mahara, an electronic portfolio, weblog, and resume builder, is prone to cross-site scripting (XSS) attacks because of missing input sanitization of the introduction text field in user profiles and any text field in a user view The oldstable distribution (etch) does not contain mahara For the stable distribution (lenny), th ...

CWE-79 http://secunia.com/advisories/34789 http://mahara.org/interaction/forum/topic.php?id=532 http://www.debian.org/security/2009/dsa-1778 http://www.securityfocus.com/bid/34677 http://secunia.com/advisories/34871 http://osvdb.org/53891 http://osvdb.org/53892 https://www.debian.org/security/./dsa-1778 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-0664

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect