CVE-2010-1667

CVE-2010-1667 family (Mahara) involves multiple vulnerabilities across Mahara versions: XSS (CVE-2010-1667), CSRF (CVE-2010-1668), an insecure configuration allowing cross-user access (CVE-2010-1670), and an IE-specific XSS via included HTML Purifier (CVE-2010-2479). Affected are Mahara < 1.0....

CVE-2010-1667

Multiple cross-site scripting XSS vulnerabilities in Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

[SECURITY] [DSA-2067-1] New mahara packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2067-1 [email protected] http://www.debian.org/security/ Raphael Geissert Jul 02, 2010 http://www.debian.org/security/faq -...