Lucene search
HistoryMar 11, 2009 - 2:19 p.m.
CVE-2009-0660
mahara
xss
cve-2009-0660
remote attackers
web script
html
5.5 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
72.3%
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.10 and 1.1 before 1.1.2 allow remote attackers to inject arbitrary web script or HTML via a (1) profile and (2) blog, a different vulnerability than CVE-2009-0487.
References
Related
ubuntucve
ubuntucve
CVE-2009-0660
2009-03-11 00:00:00
CVE-2009-0487
2009-02-09 00:00:00
prion
prion
Cross site scripting
2009-03-11 14:19:00
Cross site scripting
2009-02-09 20:30:00
debian
debian
[SECURITY] [DSA 1736-1] New mahara packages fix cross-site scripting
2009-03-10 20:33:38
openvas
openvas
Debian Security Advisory DSA 1736-1 (mahara)
2009-03-20 00:00:00
Debian: Security Advisory (DSA-1736-1)
2009-03-19 00:00:00
Ubuntu USN-732-1 (dash)
2009-03-13 00:00:00
nessus
nessus
Debian DSA-1736-1 : mahara - insufficient input sanitising
2009-03-11 00:00:00
securityvulns
securityvulns
cve
cve
CVE-2009-0487
2009-02-09 20:30:00
5.5 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
72.3%
Related for CVE-2009-0660