49 matches found
CVE-2013-4429
Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly restrict access to artefacts, which allows remote authenticated users to read arbitrary artefacts via the 1 artefact id in an upload action when creating a journal or 2 instconfartefactidselectedID parameter in an...
CVE-2013-4429
CVE-2013-4429 affects Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3. The issue is that access to artefacts is not properly restricted, allowing remote authenticated users to read arbitrary artefacts via two vectors: (1) artefact id in an upload action when creating a journal, a...
CVE-2013-4429: Undefined Security Weakness
Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly restrict access to artefacts, which allows remote authenticated users to read arbitrary artefacts via the 1 artefact id in an upload action when creating a journal or 2 instconfartefactidselectedID parameter in an...
PT-2014-2789
Name of the Vulnerable Software and Affected Versions Mahara versions prior to 1.5.12 Mahara versions 1.6.x prior to 1.6.7 Mahara versions 1.7.x prior to 1.7.3 Description The issue allows remote authenticated users to read arbitrary artefacts. This can be achieved via the artefact id in an uploa...
Mahara Information Disclosure Vulnerability
This host is running Mahara and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: secpodmaharainfodiscvuln.nasl 5055 2017-01-20 14:08:39Z teissa $ Mahara Information Disclosure Vulnerability Authors: Sharath S Copyright: Copyright c 2009 SecPod, http://www.secpod.c...
Mahara 1.1 < 1.1.5 Information Disclosure Vulnerability
Mahara is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mahara:mahara";...
CVE-2009-2171
Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...