Skip to content
OpenAdvisories
Unscored DSA-2246-1 5 CVEs

mahara - several vulnerabilities

Published May 29, 2011 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 5.0 mahara 1.0.4-4+lenny10
Debian · 6.0 mahara 1.2.6-2+squeeze2

Vulnerabilities 5

  • Unscored —
    CVE-2011-1402

    Mahara before 1.3.6 allows remote authenticated users to bypass intended access restrictions, and suspend a user accoun…

  • Unscored —
    CVE-2011-1403

    Cross-site request forgery (CSRF) vulnerability in the pieforms implementation in Mahara before 1.3.6 allows remote att…

  • Unscored —
    CVE-2011-1404

    Mahara before 1.3.6 does not properly restrict the data in responses to AJAX calls, which allows remote authenticated u…

  • Unscored —
    CVE-2011-1405

    Cross-site scripting (XSS) vulnerability in Mahara before 1.3.6 allows remote authenticated users to inject arbitrary w…

  • Unscored —
    CVE-2011-1406

    Mahara before 1.3.6 does not properly handle an https URL in the wwwroot configuration setting, which makes it easier f…