3.5
CVSSv2

CVE-2011-1405

Published: 13/05/2011 Updated: 17/08/2017
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in Mahara prior to 1.3.6 allows remote authenticated users to inject arbitrary web script or HTML via vectors associated with HTML e-mail messages, related to artefact/comment/lib.php and interaction/forum/lib.php.

Vulnerable Product Search on Vulmon Subscribe to Product

mahara mahara 1.1.2

mahara mahara 1.0.6

mahara mahara 1.1.0

mahara mahara 1.0.2

mahara mahara 1.0.12

mahara mahara 1.3.0

mahara mahara 1.0.13

mahara mahara 1.1.3

mahara mahara 1.2.0

mahara mahara 1.2.1

mahara mahara 1.2.4

mahara mahara 1.0.5

mahara mahara 1.0.8

mahara mahara 1.0.3

mahara mahara 0.9.1

mahara mahara 1.2.6

mahara mahara 1.0.11

mahara mahara 1.1.9

mahara mahara 1.1.7

mahara mahara 1.1

mahara mahara 1.2.2

mahara mahara 1.3.4

mahara mahara

mahara mahara 1.1.1

mahara mahara 1.0.0

mahara mahara 1.0.4

mahara mahara 1.0.10

mahara mahara 1.3.1

mahara mahara 1.3.2

mahara mahara 1.1.6

mahara mahara 1.1.5

mahara mahara 1.0.14

mahara mahara 1.0.15

mahara mahara 0.9.0

mahara mahara 1.3.3

mahara mahara 1.2.3

mahara mahara 1.2.5

mahara mahara 1.0.9

mahara mahara 1.0.7

mahara mahara 1.0.1

mahara mahara 0.9.2

mahara mahara 1.1.4

mahara mahara 1.1.8

Vendor Advisories

Several vulnerabilities were discovered in Mahara, an electronic portfolio, weblog, and resume builder The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2011-1402 It was discovered that previous versions of Mahara did not check user credentials before adding a secret URL to a view or suspending a user CV ...