CVE-2011-0440

Published: Mar 28, 2011Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that delete blogs.

Affected (24)

Products: Mahara: Mahara

Mahara

1 product

Mahara

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.2.0
Mahara Mahara	Version 1.2.0 alpha1
Mahara Mahara	Version 1.2.0 alpha2
Mahara Mahara	Version 1.2.0 alpha3
Mahara Mahara	Version 1.2.0 beta1
Mahara Mahara	Version 1.2.0 beta2
Mahara Mahara	Version 1.2.0 beta3
Mahara Mahara	Version 1.2.0 beta4
Mahara Mahara	Version 1.2.0 rc1
Mahara Mahara	Version 1.2.1
Mahara Mahara	Version 1.2.2
Mahara Mahara	Version 1.2.3
Mahara Mahara	Version 1.2.4
Mahara Mahara	Version 1.2.5
Mahara Mahara	Version 1.2.6

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.3.0
Mahara Mahara	Version 1.3.0 beta1
Mahara Mahara	Version 1.3.0 beta2
Mahara Mahara	Version 1.3.0 beta3
Mahara Mahara	Version 1.3.0 beta4
Mahara Mahara	Version 1.3.0 rc1
Mahara Mahara	Version 1.3.1
Mahara Mahara	Version 1.3.2
Mahara Mahara	Version 1.3.3