CVE-2012-2244

Published: Nov 24, 2012Modified: Apr 29, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to execute arbitrary programs by modifying the path to clamav. NOTE: this can be exploited without authentication by leveraging CVE-2012-2243.

Affected (14)

Products: Mahara: Mahara

Mahara

1 product

Mahara

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.4.0
Mahara Mahara	Version 1.4.1
Mahara Mahara	Version 1.4.2
Mahara Mahara	Version 1.4.3
Mahara Mahara	Version 1.4 rc1
Mahara Mahara	Version 1.4 rc2
Mahara Mahara	Version 1.4 rc3
Mahara Mahara	Version 1.4 rc4

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.5.0
Mahara Mahara	Version 1.5.1
Mahara Mahara	Version 1.5.2
Mahara Mahara	Version 1.5.3
Mahara Mahara	Version 1.5 rc1
Mahara Mahara	Version 1.5 rc2