PT-2012-3906

Name of the Vulnerable Software and Affected Versions Mahara versions 1.5.x through 1.5.6 Mahara versions 1.6.x through 1.6.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the query parameter in the "group/members.php" file...

CVE-2012-2253: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in group/members.php in Mahara 1.5.x before 1.5.7 and 1.6.x before 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter...