Описание
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the introduction field in a user profile or (2) an arbitrary text block in a user view.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | not-affected | 1.2.0-2 |
| hardy | DNE | |
| intrepid | ignored | end of life, was needed |
| jaunty | released | 1.0.9-2ubuntu0.3 |
| karmic | not-affected | 1.1.5-1ubuntu0.1 |
| upstream | released | 1.0.11, 1.1.3 |
Показывать по
Ссылки на источники
4.3 Medium
CVSS2
Связанные уязвимости
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the introduction field in a user profile or (2) an arbitrary text block in a user view.
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0.x be ...
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the introduction field in a user profile or (2) an arbitrary text block in a user view.
4.3 Medium
CVSS2