Mahara

mahara

109 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (109)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-0400 1Mahara 1Mahara Apr 29, 2026 Apr 7, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username.
CVE-2009-3299 1Mahara 1Mahara Apr 23, 2026 Nov 3, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the resume blocktype in Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2009-3298 1Mahara 1Mahara Apr 23, 2026 Nov 3, 2009 N/A· v4 N/A· v3 6.5 MEDIUM· v2 Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote authenticated institution administrators to reset a site administrator password via unspecified vectors.
CVE-2009-2171 1Mahara 1Mahara Apr 23, 2026 Jun 23, 2009 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact.
CVE-2009-2170 1Mahara 1Mahara Apr 23, 2026 Jun 23, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.12 and 1.1 before 1.1.5 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2009-0664 1Mahara 1Mahara Apr 23, 2026 Apr 23, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the introduction field in a user profile or (...Show more Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the introduction field in a user profile or (2) an arbitrary text block in a user view.Show less
CVE-2009-0660 1Mahara 1Mahara Apr 23, 2026 Mar 11, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.10 and 1.1 before 1.1.2 allow remote attackers to inject arbitrary web script or HTML via a (1) profile and (2) blog, a different vulnerability...Show more Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.10 and 1.1 before 1.1.2 allow remote attackers to inject arbitrary web script or HTML via a (1) profile and (2) blog, a different vulnerability than CVE-2009-0487.Show less
CVE-2009-0487 1Mahara 1Mahara Apr 23, 2026 Feb 9, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Mahara before 1.0.9 allows remote attackers to inject arbitrary web script or HTML via a crafted forum post.
CVE-2008-0381 1Mahara 1Mahara Apr 23, 2026 Jan 22, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Unspecified vulnerability in Mahara before 0.9.1 has unknown impact and remote attack vectors, probably related to cross-site scripting (XSS) in uploaded files.

Previous 1 2 3 4 56