EUVD-2012-2237

Malware in sbrugna...

Debian DSA-2591-1 : mahara - several vulnerabilities

Multiple security issues have been found in Mahara, an electronic portfolio, weblog, and resume builder, which can result in cross-site scripting, clickjacking or arbitrary file execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

CVE-2012-2243

Cross-site scripting XSS vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to inject arbitrary web script or HTML by uploading an XML file with the xhtml extension, which is rendered inline as script. NOTE: this can be leveraged with CVE-2012-2244 to execut...

CVE-2012-2243

CVE-2012-2243 is a cross-site scripting (XSS) vulnerability in Mahara versions 1.4.x before 1.4.5 and 1.5.x before 1.5.4, exploitable by uploading an XML file with the xhtml extension, which is rendered inline as script. The note indicates this can be leveraged with CVE-2012-2244 to execute arbit...