DSA-1924-1 mahara - several vulnerabilities

Bulletin has no description...

Debian Security Advisory DSA 1822-1 (mahara)

The remote host is missing an update to mahara announced via advisory DSA 1822-1. OpenVAS Vulnerability Test $Id: deb18221.nasl 8970 2018-02-27 15:16:18Z cfischer $ Description: Auto-generated from advisory DSA 1822-1 mahara Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1822-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mahara Information Disclosure Vulnerability

This host is running Mahara and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: secpodmaharainfodiscvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Mahara Information Disclosure Vulnerability Authors: Sharath S Copyright: Copyright c 2009 SecPod, http://www.secpod.c...

Mahara 1.1 < 1.1.5 Information Disclosure Vulnerability

Mahara is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mahara:mahara";...

Mahara Cross-Site Scripting Vulnerability

This host is running Mahara and is prone to Cross-Site Scripting Vulnerability. OpenVAS Vulnerability Test $Id: secpodmaharaxssvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Mahara Cross-Site Scripting Vulnerability Authors: Sharath S Copyright: Copyright c 2009 SecPod, http://www.secpod.com This...

Mahara Detection (HTTP)

HTTP based detection of Mahara. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.900381";...

Mahara XSS Vulnerability (Jun 2009)

Mahara is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mahara:mahara";...

[SECURITY] [DSA 1822-1] New mahara packages fix cross-site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1822-1 [email protected] http://www.debian.org/security/ Nico Golde June 23rd, 2009 http://www.debian.org/security/faq -...

Debian DSA-1822-1 : mahara - insufficient input sanitization

It was discovered that mahara, an electronic portfolio, weblog, and resume builder is prone to several cross-site scripting attacks, which allow an attacker to inject arbitrary HTML or script code and steal potential sensitive data from other users. The oldstable distribution etch does not contai...

CVE-2009-2170

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.0 before 1.0.12 and 1.1 before 1.1.5 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2009-2170

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.0 before 1.0.12 and 1.1 before 1.1.5 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.0 before 1.0.12 and 1.1 before 1.1.5 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

Code injection

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...

CVE-2009-2171

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...

CVE-2009-2171

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...

CVE-2009-2170

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.0 before 1.0.12 and 1.1 before 1.1.5 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2009-2170

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.0 before 1.0.12 and 1.1 before 1.1.5 allow remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2009-2170

Summary of CVE-2009-2170 (Mahara XSS) : Multiple cross-site scripting vulnerabilities affect Mahara 1.0 before 1.0.12 and 1.1 before 1.1.5, enabling remote attackers to inject arbitrary script/HTML via unknown vectors. The NVD entry lists a base CVSSv2 score of 4.3 (Medium), with network attack v...

CVE-2009-2171

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...