PT-2012-3904

Name of the Vulnerable Software and Affected Versions Mahara versions 1.4.x through 1.4.4 Mahara versions 1.5.x through 1.5.3 Description The issue allows remote attackers to conduct clickjacking attacks, enabling them to delete arbitrary users and bypass CSRF protection via the...

CVE-2012-2246: Improper Input Validation

Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php...