CVE-2009-0660

MITTEL 4.3CVE-2009-0660 · Published 11/03/2009 · updated 16/06/2026

Kurz gesagt

CVE-2009-0660 ist eine Schwachstelle (MITTEL (CVSS 4.3)) in mahara (mahara).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.1%, höher als bei 81.8% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
mahara mahara	`= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.0.9= 1.1.0= 1.1.1`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.10 and 1.1 before 1.1.2 allow remote attackers to inject arbitrary web script or HTML via a (1) profile and (2) blog, a different vulnerability than CVE-2009-0487.

References

mahara.org/interaction/forum/topic.php · Vendor Advisory
secunia.com/advisories/34222 · Vendor Advisory
secunia.com/advisories/34231 · Vendor Advisory
wiki.mahara.org/Release_Notes/1.1.2
debian.org/security/2009/dsa-1736
securityfocus.com/bid/34064 · Exploit
vupen.com/english/advisories/2009/0665
exchange.xforce.ibmcloud.com/vulnerabilities/49168

Weitere Schwachstellen in mahara

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mahara

= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.0.5= 1.0.6= 1.0.7= 1.0.8= 1.0.9= 1.1.0= 1.1.1

No fix yet

Weitere Schwachstellen in mahara

Alle anzeigen →