CVE-2012-2246

Published: Nov 24, 2012Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php.

Affected (15)

Products: Mahara: Mahara

Mahara

1 product

Mahara

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.4.0
Mahara Mahara	Version 1.4.1
Mahara Mahara	Version 1.4.2
Mahara Mahara	Version 1.4.3
Mahara Mahara	Version 1.4.4
Mahara Mahara	Version 1.4 rc1
Mahara Mahara	Version 1.4 rc2
Mahara Mahara	Version 1.4 rc3
Mahara Mahara	Version 1.4 rc4

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.5.0
Mahara Mahara	Version 1.5.1
Mahara Mahara	Version 1.5.2
Mahara Mahara	Version 1.5.3
Mahara Mahara	Version 1.5 rc1
Mahara Mahara	Version 1.5 rc2