Published: 06/07/2010 Updated: 17/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Mahara prior to 1.0.15, 1.1.x prior to 1.1.9, and 1.2.x prior to 1.2.5 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mahara mahara 0.9.1
mahara mahara 0.9.0
mahara mahara 1.0.5
mahara mahara 1.0.6
mahara mahara
mahara mahara 1.0.1
mahara mahara 1.0.2
mahara mahara 1.0.10
mahara mahara 1.0.11
mahara mahara 0.9.2
mahara mahara 1.0.0
mahara mahara 1.0.7
mahara mahara 1.0.8
mahara mahara 1.0.3
mahara mahara 1.0.4
mahara mahara 1.0.12
mahara mahara 1.0.13
mahara mahara 1.1.0
mahara mahara 1.1.6
mahara mahara 1.1.5
mahara mahara 1.1.7
mahara mahara 1.1.2
mahara mahara 1.1.1
mahara mahara 1.1.4
mahara mahara 1.1.3
mahara mahara 1.1.8
mahara mahara 1.2.0
mahara mahara 1.2.4
mahara mahara 1.2.1
mahara mahara 1.2.2
mahara mahara 1.2.3

Several vulnerabilities were discovered in mahara, an electronic portfolio, weblog, and resume builder The following Common Vulnerabilities and Exposures project ids identify them: CVE-2010-1667 Multiple pages performed insufficient input sanitising, making them vulnerable to cross-site scripting attacks CVE-2010-1668 Multiple forms ...

CWE-79 http://wiki.mahara.org/Release_Notes/1.1.9 http://wiki.mahara.org/Release_Notes/1.0.15 http://wiki.mahara.org/Release_Notes/1.2.5 http://secunia.com/advisories/40431 http://www.securityfocus.com/bid/41319 https://exchange.xforce.ibmcloud.com/vulnerabilities/59993 https://nvd.nist.gov https://www.debian.org/security/./dsa-2067

CVE-2010-1667

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect