Code injection

2017-11-0318:29:00

PRIOn knowledge base

www.prio-n.com

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.8%

JSON

Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to anonymous comments being able to be placed on artefact detail pages even when the site administrator had disallowed anonymous comments.

CPENameOperatorVersion
maharaeq1.9.1
maharaeq1.9.2
maharaeq1.9.3
maharaeq1.9.0
maharaeq1.9 rc1
maharaeq1.9.4
maharaeq1.9.5
maharaeq1.9.6
maharaeq1.10.0
maharaeq1.10 rc1