mahara -- sql injection vulnerability

The Debian security team reports: It was discovered that mahara, an electronic portfolio, weblog, and resume builder is not properly escaping input when generating a unique username based on a remote user name from a single sign-on application. An attacker can use this to compromise the mahara...

DSA-2030-1 mahara - sql injection

Bulletin has no description...

Debian DSA-1924-1 : mahara - several vulnerabilities

Two vulnerabilities have been discovered in mahara, an electronic portfolio, weblog, and resume builder. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3298 Ruslan Kabalin discovered a issue with resetting passwords, which could lead to a privilege...

Mahara管理密码重置安全绕过漏洞

Bugraq ID: 36893 CVE ID：CVE-2009-3298 Mahara是一款开源的电子文件夹，网络日志，履历表生成器和社会化网络系统。 Mahara存在一个未明的安全漏洞，远程攻击者可以重设站点管理员密码，导致完全控制应用系统。 Mahara Mahara 1.1.6 Mahara Mahara 1.1.5 Mahara Mahara 1.1.4 Mahara Mahara 1.1.3 Mahara Mahara 1.1.2 Mahara Mahara 1.1.1 Mahara Mahara 1.0.12 Mahara Mahara 1.0.11 Mahara Maha...

Debian Security Advisory DSA 1924-1 (mahara)

The remote host is missing an update to mahara announced via advisory DSA 1924-1. OpenVAS Vulnerability Test $Id: deb19241.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1924-1 mahara Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1924-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mahara Multiple Vulnerabilities (Nov 2009)

Mahara is prone to a security bypass and cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mahara Multiple vulnerabilities

Mahara is prone to a security-bypass vulnerability and to a to a cross-site scripting vulnerability. An attacker can exploit this issue to reset the application's administrator password or to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site...

CVE-2009-3298

Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote authenticated institution administrators to reset a site administrator password via unspecified vectors...

CVE-2009-3299

Cross-site scripting XSS vulnerability in the resume blocktype in Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the resume blocktype in Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3299

Cross-site scripting XSS vulnerability in the resume blocktype in Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3298

Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote authenticated institution administrators to reset a site administrator password via unspecified vectors...

Design/Logic Flaw

Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote authenticated institution administrators to reset a site administrator password via unspecified vectors...

CVE-2009-3298

Mahara up to version 1.0.12 and 1.1.x up to 1.1.6 is affected: remote authenticated institutional administrators can reset the site administrator's password via unspecified vectors, enabling privilege escalation. Affects Mahara core components handling admin authentication. Remediation per source...

CVE-2009-3298

Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote authenticated institution administrators to reset a site administrator password via unspecified vectors...

CVE-2009-3299

The connected sources confirm CVE-2009-3299 is a cross-site scripting (XSS) vulnerability in Mahara’s resume blocktype, affecting Mahara versions prior to 1.0.13 and 1.1.x prior to 1.1.7. The issue allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Public details con...

CVE-2009-3299

Cross-site scripting XSS vulnerability in the resume blocktype in Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

[SECURITY] [DSA 1924-1] New mahara packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1924-1 [email protected] http://www.debian.org/security/ Steffen Joeris October 31, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1924-1] New mahara packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1924-1 [email protected] http://www.debian.org/security/ Steffen Joeris October 31, 2009 http://www.debian.org/security/faq -...