Browse CVEs

MEDIUM 6.0 CVE-2012-2244 Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to execute arbitrary programs by modifying the path to cl… Mahara Patch available Fix from $1,6002012-11-24 MEDIUM 6.8 CVE-2011-2773 Cross-site request forgery (CSRF) vulnerability in Mahara before 1.4.1 allows remote attackers to hijack the authentication of administrators for req… Mahara after 1.4.0 Fix from $1,6002011-11-15 MEDIUM 6.0 CVE-2011-4118 Mahara before 1.4.1, when MNet (aka the Moodle network feature) is used, allows remote authenticated users to gain privileges via a jump to an XMLRPC… Mahara after 1.4.0 Fix from $1,6002011-11-15 MEDIUM 5.0 CVE-2011-2772 The get_dataroot_image_path function in lib/file.php in Mahara before 1.4.1 does not properly validate uploaded image files, which allows remote atta… Mahara after 1.4.0 Fix from $1,6002011-11-15 MEDIUM 6.8 CVE-2011-1403 Cross-site request forgery (CSRF) vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote attackers to hijack the authentic… Mahara after 1.3.5 Fix from $1,6002011-05-13 MEDIUM 6.5 CVE-2011-1402 Mahara before 1.3.6 allows remote authenticated users to bypass intended access restrictions, and suspend a user account, edit a view, visit a view, … Mahara after 1.3.5 Fix from $1,6002011-05-13 MEDIUM 5.8 CVE-2011-0440 Cross-site request forgery (CSRF) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the authenticat… Mahara Mitigation only Fix from $1,6002011-03-28 HIGH 7.5 CVE-2010-1669 SQL injection vulnerability in Mahara 1.1.x before 1.1.9 and 1.2.x before 1.2.5 allows remote attackers to execute arbitrary SQL commands via unspeci… Mahara Patch available Fix from $1,9502010-07-06 HIGH 7.5 CVE-2010-1670 Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 has improper configuration options for authentication plugins associated with logins… Mahara after 1.0.14 Fix from $1,9502010-07-06 MEDIUM 6.8 CVE-2010-1668 Multiple cross-site request forgery (CSRF) vulnerabilities in Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 allow remote attackers… Mahara after 1.0.14 Fix from $1,6002010-07-06 HIGH 7.5 CVE-2010-0400 SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username. Mahara Patch available Fix from $1,9502010-04-07 MEDIUM 6.5 CVE-2009-3298 Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote authenticated institution administrators to reset a site administrator password via unspe… Mahara after 1.0.12 Fix from $1,6002009-11-03