Description
SQL injection vulnerability in Mahara 1.1.x before 1.1.9 and 1.2.x before 1.2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
References
- http://wiki.mahara.org/Release_Notes/1.1.9
- http://wiki.mahara.org/Release_Notes/1.2.5
- mahara-unspecified-sql-injection(59995) vdb-entry
- 40431 third-party-advisory
- 41319 vdb-entry