Catalyst IT Mahara 操作系统命令注入漏洞

Catalyst IT Mahara is a social networking system from Catalyst IT in New Zealand. The system includes a blog, resume builder, file manager, and more. Mahara suffers from an operating system command injection vulnerability that can be exploited to conduct cross-site scripting attacks via the...

Mahara 跨站脚本漏洞

Mahara is a social networking system owned by Catalyst IT in New Zealand. Mahara is vulnerable to cross-site scripting attacks via the \SCRIPT\ element...

Mahara 路径遍历漏洞

Mahara is a social networking system. The system includes a blog, resume builder, file manager, and more. Mahara suffers from a security vulnerability that allows an attacker to bypass the intended access control on HTML files through directory traversal...

Mahara <= 19.10.2 XSS Vulnerability

Mahara is prone to a cross-site scripting XSS vulnerability in the component groupfiles.php via the Number and Description parameters. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mahara <= 20.10 CSRF Vulnerability

Mahara is prone to a cross-site request forgery CSRF vulnerability that allows a remote attacker to remove inbox-mail on the server. The application fails to validate the CSRF token for a POST request. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a...

CVE-2020-23052

Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component groupfiles.php via the Number Nombre and Description Descripción parameters...

CVE-2020-23052

Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component groupfiles.php via the Number Nombre and Description Descripción parameters...

Cross site scripting

Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component groupfiles.php via the Number Nombre and Description Descripción parameters...

CVE-2020-23052

Summary : CVE-2020-23052 affects Catalyst IT Ltd Mahara CMS v19.10.2. The vulnerability is a multiple cross-site scripting (XSS) issue in the component groupfiles.php , exploitable via the Number (Nombre) and Description (Descripción) parameters. The connected documents provide consistent descrip...

CVE-2020-23052

Catalyst IT Ltd Mahara CMS v19.10.2 was discovered to contain multiple cross-site scripting XSS vulnerabilities in the component groupfiles.php via the Number Nombre and Description Descripción parameters...

Catalyst It Ltd Mahara Cms 跨站脚本漏洞

Catalyst It Ltd Mahara Cms is a fully featured electronic portfolio, blog, resume builder and social networking system from Catalyst It Ltd in New Zealand. Used to connect users and create online communities. A security vulnerability exists in Catalyst IT Ltd Mahara CMS, which stems from multiple...

Catalyst IT Mahara Cross-Site Request Forgery Vulnerability

Catalyst IT Mahara is a social networking system from Catalyst IT Catalyst It in New Zealand. The system includes a blog, resume builder, file manager and more. A cross-site request forgery vulnerability exists in Catalyst IT Mahara 20.10, which can be exploited by an attacker to delete inbox-mai...

CVE-2021-29349

Mahara 20.10 is affected by Cross Site Request Forgery CSRF that allows a remote attacker to remove inbox-mail on the server. The application fails to validate the CSRF token for a POST request. An attacker can craft a module/multirecipientnotification/inbox.php pieformdeleteallnotifications...

CVE-2021-29349

Mahara 20.10 is affected by Cross Site Request Forgery CSRF that allows a remote attacker to remove inbox-mail on the server. The application fails to validate the CSRF token for a POST request. An attacker can craft a module/multirecipientnotification/inbox.php pieformdeleteallnotifications...

CVE-2021-29349

Mahara 20.10 is affected by Cross Site Request Forgery CSRF that allows a remote attacker to remove inbox-mail on the server. The application fails to validate the CSRF token for a POST request. An attacker can craft a module/multirecipientnotification/inbox.php pieformdeleteallnotifications...

Cross site request forgery (csrf)

Mahara 20.10 is affected by Cross Site Request Forgery CSRF that allows a remote attacker to remove inbox-mail on the server. The application fails to validate the CSRF token for a POST request. An attacker can craft a module/multirecipientnotification/inbox.php pieformdeleteallnotifications...

CVE-2021-29349

CVE-2021-29349 affects Mahara 20.10 and is due to CSRF token validation failure on a POST request. An attacker can craft a request to module/multirecipientnotification/inbox.php pieform_delete_all_notifications that results in removing all messages from a mailbox, i.e., a server-side inbox wipe. ...

CVE-2021-29349

Mahara 20.10 is affected by Cross Site Request Forgery CSRF that allows a remote attacker to remove inbox-mail on the server. The application fails to validate the CSRF token for a POST request. An attacker can craft a module/multirecipientnotification/inbox.php pieformdeleteallnotifications...

Catalyst IT Mahara 跨站请求伪造漏洞

Catalyst IT Mahara is a social networking system from Catalyst IT Catalyst It in New Zealand. The system includes a blog, resume builder, file manager and more. A cross-site request forgery vulnerability exists in Catalyst IT Mahara 20.10, which can be exploited by an attacker to delete inbox-mai...

Mahara 19.04 < 19.04.6, 19.10 < 19.10.4, 20.04.0 XSS Vulnerability

Mahara is prone to a cross-site scripting XSS vulnerability where certain places could execute file or folder names containing JavaScript. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...