CVE-2011-1404

Published: May 13, 2011Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Mahara before 1.3.6 does not properly restrict the data in responses to AJAX calls, which allows remote authenticated users to obtain sensitive information via a request associated with (1) blocktype/myfriends/myfriends.json.php, (2) json/usersearch.php, (3) group/membersearchresults.json.php, or (4) json/friendsearch.php, as demonstrated by information about friends and e-mail addresses.

Affected (65)

Products: Mahara: Mahara

Mahara

1 product

Mahara

Configuration A

65 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Up to 1.3.5
Mahara Mahara	Version 0.9.0
Mahara Mahara	Version 0.9.1
Mahara Mahara	Version 0.9.2
Mahara Mahara	Version 1.0.0
Mahara Mahara	Version 1.0.10
Mahara Mahara	Version 1.0.11
Mahara Mahara	Version 1.0.12
Mahara Mahara	Version 1.0.13
Mahara Mahara	Version 1.0.14
Mahara Mahara	Version 1.0.15
Mahara Mahara	Version 1.0.1
Mahara Mahara	Version 1.0.2
Mahara Mahara	Version 1.0.3
Mahara Mahara	Version 1.0.4
Mahara Mahara	Version 1.0.5
Mahara Mahara	Version 1.0.6
Mahara Mahara	Version 1.0.7
Mahara Mahara	Version 1.0.8
Mahara Mahara	Version 1.0.9
Mahara Mahara	Version 1.1.0
Mahara Mahara	Version 1.1.0 alpha1
Mahara Mahara	Version 1.1.0 alpha2
Mahara Mahara	Version 1.1.0 alpha3
Mahara Mahara	Version 1.1.0 beta1
Mahara Mahara	Version 1.1.0 beta2
Mahara Mahara	Version 1.1.0 beta3
Mahara Mahara	Version 1.1.0 beta4
Mahara Mahara	Version 1.1.0 rc1
Mahara Mahara	Version 1.1.0 rc2
Mahara Mahara	Version 1.1.1
Mahara Mahara	Version 1.1.2
Mahara Mahara	Version 1.1.3
Mahara Mahara	Version 1.1.4
Mahara Mahara	Version 1.1.5
Mahara Mahara	Version 1.1.6
Mahara Mahara	Version 1.1.7
Mahara Mahara	Version 1.1.8
Mahara Mahara	Version 1.1.9
Mahara Mahara	Version 1.1
Mahara Mahara	Version 1.2.0
Mahara Mahara	Version 1.2.0 alpha1
Mahara Mahara	Version 1.2.0 alpha2
Mahara Mahara	Version 1.2.0 alpha3
Mahara Mahara	Version 1.2.0 beta1
Mahara Mahara	Version 1.2.0 beta2
Mahara Mahara	Version 1.2.0 beta3
Mahara Mahara	Version 1.2.0 beta4
Mahara Mahara	Version 1.2.0 rc1
Mahara Mahara	Version 1.2.1
Mahara Mahara	Version 1.2.2
Mahara Mahara	Version 1.2.3
Mahara Mahara	Version 1.2.4
Mahara Mahara	Version 1.2.5
Mahara Mahara	Version 1.2.6
Mahara Mahara	Version 1.3.0
Mahara Mahara	Version 1.3.0 beta1
Mahara Mahara	Version 1.3.0 beta2
Mahara Mahara	Version 1.3.0 beta3
Mahara Mahara	Version 1.3.0 beta4
Mahara Mahara	Version 1.3.0 rc1
Mahara Mahara	Version 1.3.1
Mahara Mahara	Version 1.3.2
Mahara Mahara	Version 1.3.3
Mahara Mahara	Version 1.3.4