CVE-2009-0664

Published: Apr 23, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the introduction field in a user profile or (2) an arbitrary text block in a user view.

Affected (22)

Products: Mahara: Mahara

Mahara

1 product

Mahara

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.0.0
Mahara Mahara	Version 1.0.10
Mahara Mahara	Version 1.0.1
Mahara Mahara	Version 1.0.2
Mahara Mahara	Version 1.0.3
Mahara Mahara	Version 1.0.4
Mahara Mahara	Version 1.0.5
Mahara Mahara	Version 1.0.6
Mahara Mahara	Version 1.0.7
Mahara Mahara	Version 1.0.8
Mahara Mahara	Version 1.0.9
Mahara Mahara	Version 1.1.0 alpha1
Mahara Mahara	Version 1.1.0 alpha2
Mahara Mahara	Version 1.1.0 alpha3
Mahara Mahara	Version 1.1.0 beta1
Mahara Mahara	Version 1.1.0 beta2
Mahara Mahara	Version 1.1.0 beta3
Mahara Mahara	Version 1.1.0 beta4
Mahara Mahara	Version 1.1.0 rc1
Mahara Mahara	Version 1.1.0 rc2
Mahara Mahara	Version 1.1.1
Mahara Mahara	Version 1.1.2