CVE-2013-4430

Published: May 19, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 allows remote attackers to inject arbitrary web script or HTML via the Host header to lib/web.php.

Affected (24)

Products: Mahara: Mahara

Mahara

1 product

Mahara

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.7.0
Mahara Mahara	Version 1.7.1
Mahara Mahara	Version 1.7.2
Mahara Mahara	Version 1.7. rc1

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Version 1.6.0
Mahara Mahara	Version 1.6.1
Mahara Mahara	Version 1.6.2
Mahara Mahara	Version 1.6.3
Mahara Mahara	Version 1.6.4
Mahara Mahara	Version 1.6.5
Mahara Mahara	Version 1.6.6

Configuration C

13 vulnerable

Vulnerable Software	Affected Versions
Mahara Mahara	Up to 1.5.11
Mahara Mahara	Version 1.5.0
Mahara Mahara	Version 1.5.10
Mahara Mahara	Version 1.5.1
Mahara Mahara	Version 1.5.2
Mahara Mahara	Version 1.5.3
Mahara Mahara	Version 1.5.4
Mahara Mahara	Version 1.5.6
Mahara Mahara	Version 1.5.7
Mahara Mahara	Version 1.5.8
Mahara Mahara	Version 1.5.9
Mahara Mahara	Version 1.5 rc1
Mahara Mahara	Version 1.5 rc2