EUVD-2011-0464

Malware in sbrugna...

CVE-2011-1403: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote attackers to hijack the authentication of arbitrary users for requests to any form, related to inappropriate regeneration of session keys...

CVE-2011-0439

Cross-site scripting XSS vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the Pieforms select box...

Cross site scripting

Cross-site scripting XSS vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the Pieforms select box...

CVE-2011-0439

Cross-site scripting XSS vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the Pieforms select box...

CVE-2011-0439

CVE-2011-0439 affects Mahara; OpenVAS entries corroborate two issues: (1) XSS via unsanitized input in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4, (2) CVRF-equivalent risk (CVE-2011-0440) where session key checks may fail, enabling blog deletions. CVE-2011-0439’s impact is reflected as part...

CVE-2011-0439: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the Pieforms select box...