Skip to content
OpenAdvisories
Unscored CVE-2011-0439 EUVD-2011-0464GHSA-x786-9669-6rv6

Cross-site scripting (XSS) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to inject arbitrary we…

Published Mar 28, 2011 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the Pieforms select box.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 6.0 mahara 1.2.6-2+squeeze1 DSA-2206-1
Debian 5.0 mahara 1.0.4-4+lenny8 DSA-2206-1

Advisories 1

References