Unscored DSA-2334-1 4 CVEs

mahara - several

Published Nov 4, 2011 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 5.0	mahara	1.0.4-4+lenny11
Debian · 6.0	mahara	1.2.6-2+squeeze3

Vulnerabilities 4

Unscored —

CVE-2011-2771

Multiple cross-site scripting (XSS) vulnerabilities in Mahara before 1.4.1 allow remote attackers to inject arbitrary w…

Nov 15, 2011
Unscored —

CVE-2011-2772

The get_dataroot_image_path function in lib/file.php in Mahara before 1.4.1 does not properly validate uploaded image f…

Nov 15, 2011
Unscored —

CVE-2011-2773

Cross-site request forgery (CSRF) vulnerability in Mahara before 1.4.1 allows remote attackers to hijack the authentica…

Nov 15, 2011
Unscored —

CVE-2011-4118

Mahara before 1.4.1, when MNet (aka the Moodle network feature) is used, allows remote authenticated users to gain priv…

Nov 15, 2011