CVE-2011-2772: Improper Input Validation

The getdatarootimagepath function in lib/file.php in Mahara before 1.4.1 does not properly validate uploaded image files, which allows remote attackers to cause a denial of service memory consumption via a 1 large or 2 invalid image...

PT-2011-4079

Name of the Vulnerable Software and Affected Versions Mahara versions prior to 1.4.1 Description The issue concerns the get dataroot image path function in lib/file.php, which does not properly validate uploaded image files. This allows remote attackers to cause a denial of service, specifically...