Artefact St. CMS Cross Site Scripting / Path Disclosure

I want to warn you about Cross-Site Scripting, Brute Force and Full path disclosure vulnerabilities in Artefact St. CMS. It's Ukrainian commercial CMS. SecurityVulns ID: 11531. ------------------------- Affected products: ------------------------- Vulnerable are all versions of Artefact St. CMS a...

CVE-2009-2171

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...

Code injection

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...

CVE-2009-2171

CVE-2009-2171 affects Mahara 1.1 prior to 1.1.5. The root cause is missing permission checks when saving a view that contains artefacts, enabling remote authenticated users to read another user’s artefact (information disclosure). The issue is documented across multiple feeds (NVD entry and Red H...

CVE-2009-2171: Undefined Security Weakness

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...