CVE-2025-59308

In Mahara before 24.04.10 and 25 before 25.04.1, an institution administrator or institution support administrator on a multi-tenanted site can masquerade as an institution member in an institution for which they are not an administrator, if they also have the 'Site staff' role...

EUVD-2025-209573

Mahara before 25.04.2 and 24.04.11 are vulnerable to displaying results that can trigger XSS via a malicious search query string. This occurs in the 'search site' feature when using the Elasticsearch7 search plugin. The Elasticsearch function does not properly sanitize input in the query paramete...

EUVD-2012-2239

Malware in sbrugna...

EUVD-2017-1430

Malware in sbrugna...

EUVD-2018-3238

Malware in sbrugna...

EUVD-2017-1436

Malware in sbrugna...

EUVD-2017-1433

Malware in sbrugna...

EUVD-2012-2237

Malware in sbrugna...

EUVD-2017-1432

Malware in sbrugna...

EUVD-2021-15985

Malware in sbrugna...

EUVD-2009-3281

Malware in sbrugna...

EUVD-2017-1427

Malware in sbrugna...

EUVD-2018-3591

Malware in sbrugna...

EUVD-2012-2236

Malware in sbrugna...

EUVD-2011-2746

Malware in sbrugna...

EUVD-2017-6247

Malware in sbrugna...

EUVD-2017-1428

Malware in sbrugna...

EUVD-2017-1440

Malware in sbrugna...

EUVD-2011-1412

Malware in sbrugna...

EUVD-2017-1435

Malware in sbrugna...