EUVD-2011-0464

Malware in sbrugna...

CVE-2011-1403

Cross-site request forgery CSRF vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote attackers to hijack the authentication of arbitrary users for requests to any form, related to inappropriate regeneration of session keys...

CVE-2011-1403: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote attackers to hijack the authentication of arbitrary users for requests to any form, related to inappropriate regeneration of session keys...

CVE-2011-0439

Cross-site scripting XSS vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the Pieforms select box...

Cross site scripting

Cross-site scripting XSS vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the Pieforms select box...

CVE-2011-0439

Cross-site scripting XSS vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the Pieforms select box...

CVE-2011-0439

CVE-2011-0439 affects Mahara; OpenVAS entries corroborate two issues: (1) XSS via unsanitized input in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4, (2) CVRF-equivalent risk (CVE-2011-0440) where session key checks may fail, enabling blog deletions. CVE-2011-0439’s impact is reflected as part...

CVE-2011-0439

Cross-site scripting XSS vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the Pieforms select box...

PT-2011-2342

Name of the Vulnerable Software and Affected Versions Mahara versions 1.2.x through 1.2.6 Mahara versions 1.3.x through 1.3.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Pieforms select box. This could potentially lead to...

CVE-2011-0439: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the Pieforms select box...