CVEvulnerability
CVE-2009-3299
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-11-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the resume blocktype in Mahara before 1.0.13, and 1.1.x before 1.1.7, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• mahara mahara (<= 1.0.12)
• mahara mahara 1.0.4
• mahara mahara 1.0.7
• mahara mahara 1.0.10
• mahara mahara 1.0.11
• mahara mahara 1.1.0
• mahara mahara 1.1.1
• mahara mahara 1.1.2
• mahara mahara 1.1.3
• mahara mahara 1.1.4
• mahara mahara 1.1.5
• mahara mahara 1.1.6
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://eduforge.org/frs/shownotes.php?release_id=546 Patch
- http://eduforge.org/frs/shownotes.php?release_id=547 eduforge.org
- http://mahara.org/interaction/forum/topic.php?id=1170 mahara.org
- http://secunia.com/advisories/37217 Vendor Advisory
- http://secunia.com/advisories/37218 Vendor Advisory
- http://www.debian.org/security/2009/dsa-1924 www.debian.org
- http://www.osvdb.org/59583 www.osvdb.org
- http://www.securityfocus.com/bid/36892 Patch
- http://www.vupen.com/english/advisories/2009/3101 Patch, Vendor Advisory
- http://eduforge.org/frs/shownotes.php?release_id=546 Patch
- http://eduforge.org/frs/shownotes.php?release_id=547 eduforge.org
- http://mahara.org/interaction/forum/topic.php?id=1170 mahara.org
- http://secunia.com/advisories/37217 Vendor Advisory
- http://secunia.com/advisories/37218 Vendor Advisory
- http://www.debian.org/security/2009/dsa-1924 www.debian.org
- http://www.osvdb.org/59583 www.osvdb.org
- http://www.securityfocus.com/bid/36892 Patch
- http://www.vupen.com/english/advisories/2009/3101 Patch, Vendor Advisory