CVE-2009-2171

CVE-2009-2171 affects Mahara 1.1 prior to 1.1.5. The root cause is missing permission checks when saving a view that contains artefacts, enabling remote authenticated users to read another user’s artefact (information disclosure). The issue is documented across multiple feeds (NVD entry and Red H...

[SECURITY] [DSA 1822-1] New mahara packages fix cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA-1822-1 [email protected] http://www.debian.org/security/ Nico Golde June 23rd, 2009 http://www.debian.org/security/faq -...

DSA-1822-1 mahara - cross-site scripting

Bulletin has no description...

Debian Security Advisory DSA 1778-1 (mahara)

The remote host is missing an update to mahara announced via advisory DSA 1778-1. OpenVAS Vulnerability Test $Id: deb17781.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1778-1 mahara Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1778-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mahara用户配置文件跨站脚本漏洞

BUGTRAQ ID: 34677 CVECAN ID: CVE-2009-0664 Mahara是一个开源的电子文件夹，网络日志，履历表生成器和社会联网系统。 Mahara没有正确地过滤对introduction用户配置文件字段和用户视图某些文本块所传送的输入参数便返回给了用户，远程攻击者可以通过向服务器提交恶意请求执行跨站脚本攻击，导致在用户浏览器会话中注入并执行任意HTML和脚本代码。 Eduforge.org Mahara 1.1.x Eduforge.org Mahara 1.0.x Debian ------...

CVE-2009-0664

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject arbitrary web script or HTML via 1 the introduction field in a user profile or 2 an arbitrary text block in a user view...

CVE-2009-0664

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject arbitrary web script or HTML via 1 the introduction field in a user profile or 2 an arbitrary text block in a user view...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject arbitrary web script or HTML via 1 the introduction field in a user profile or 2 an arbitrary text block in a user view...

CVE-2009-0664

CVE-2009-0664 affects Mahara: XSS in Mahara 1.0.x < 1.0.11 and 1.1.x

CVE-2009-0664

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject arbitrary web script or HTML via 1 the introduction field in a user profile or 2 an arbitrary text block in a user view...

[SECURITY] [DSA 1778-1] New mahara packages fix cross-site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA-1778-1 [email protected] http://www.debian.org/security/ Nico Golde April 22nd, 2009 http://www.debian.org/security/faq -...

Debian DSA-1778-1 : mahara - insufficient input sanitization

It was discovered that mahara, an electronic portfolio, weblog, and resume builder, is prone to cross-site scripting XSS attacks because of missing input sanitization of the introduction text field in user profiles and any text field in a user view. The oldstable distribution etch does not contai...

[SECURITY] [DSA 1778-1] New mahara packages fix cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA-1778-1 [email protected] http://www.debian.org/security/ Nico Golde April 22nd, 2009 http://www.debian.org/security/faq -...

DSA-1778-1 mahara - cross-site scripting

Bulletin has no description...

Debian Security Advisory DSA 1736-1 (mahara)

The remote host is missing an update to mahara announced via advisory DSA 1736-1. OpenVAS Vulnerability Test $Id: deb17361.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1736-1 mahara Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1736-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1736-1] New mahara packages fix cross-site scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1736-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 10, 2009 http://www.debian.org/security/faq -...

CVE-2009-0660

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.0 before 1.0.10 and 1.1 before 1.1.2 allow remote attackers to inject arbitrary web script or HTML via a 1 profile and 2 blog, a different vulnerability than CVE-2009-0487...

CVE-2009-0660

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.0 before 1.0.10 and 1.1 before 1.1.2 allow remote attackers to inject arbitrary web script or HTML via a 1 profile and 2 blog, a different vulnerability than CVE-2009-0487...