exploits , vulnerabilities , articles , Mahara Resume Blocktype Cross Site Scripting Vulnerability

Title	Mahara Resume Blocktype Cross Site Scripting Vulnerability
Published	2009-11-30-12:00AM
Updated	2009-11-30-12:00AM
Class	Input Validation Error
CVE	CVE-2009-3299
Remote	Yes
Local	No
Credit	Sven Vetsch
Vulnerable	Mahara Mahara 1.1.6 Mahara Mahara 1.1.5 Mahara Mahara 1.1.4 Mahara Mahara 1.1.3 Mahara Mahara 1.1.2 Mahara Mahara 1.1.1 Mahara Mahara 1.0.12 Mahara Mahara 1.0.11 Mahara Mahara 1.0.10 Mahara Mahara 1.0.9 Mahara Mahara 1.0.8 Mahara Mahara 1.0.6 Mahara Mahara 1.0.5 Mahara Mahara 1.0.4 Mahara Mahara 1.0.3 Mahara Mahara 1.0.2 Mahara Mahara 1.0.1
Not Vulnerable	Mahara Mahara 1.1.7 Mahara Mahara 1.0.13
Code	Attackers can exploit this issue by enticing an unsuspecting victim into following a malicious URI.
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-02 Drupal Taxonomy Timer Module SQL Injection Vulnerability
• 2009-12-02 Pligg Cross Site Scripting And Request Forgery Remote Vulnerabilities
• 2009-12-02 SafeNet SoftRemote Policy File Handling Remote Buffer Overflow Vulnerabilities
• 2009-12-02 Autodesk 3ds Max Application Callbacks Arbitrary Command Execution Vulnerability
• 2009-12-02 Autodesk Softimage Scene TOC File Remote Code Execution Vulnerability
• 2009-12-02 Autodesk Maya MEL Script Nodes Remote Command Execution Vulnerability
• 2009-12-02 Roxio Creator Image Parsing Integer Overflow Vulnerability
• 2009-12-02 Simple Machines Forum Multiple Security Vulnerabilities
• 2009-12-01 AWStats Multiple Unspecified Security Vulnerabilities
• 2009-12-01 TYPO3 simple Glossar Extension Unspecified Cross-Site Scripting and SQL-Injection Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Thu, 03 Dec 2009 02:29:08 +0000