Unscored DSA-1924-1 2 CVEs

mahara - several vulnerabilities

Published Oct 31, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 5.0	mahara	1.0.4-4+lenny4

Vulnerabilities 2

Unscored —

CVE-2009-3298

Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote authenticated institution administrators to reset a site ad…

Nov 3, 2009
Unscored —

CVE-2009-3299

Cross-site scripting (XSS) vulnerability in the resume blocktype in Mahara before 1.0.13, and 1.1.x before 1.1.7, allow…

Nov 3, 2009