CVE-2009-0660: XSS
Published Mar 11, 2009
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.10 and 1.1 before 1.1.2 allow remote attackers to inject arbitrary web script or HTML via a (1) profile and (2) blog, a different vulnerability than CVE-2009-0487.
Affected Software
21 affected components
Mahara Mahara=1.1.0-beta4
Mahara Mahara=1.0.4
Mahara Mahara=1.0.1
Mahara Mahara=1.0.8
Mahara Mahara=1.0.6
Mahara Mahara=1.0.9
Mahara Mahara=1.0.5
Mahara Mahara=1.1.0-alpha3
Mahara Mahara=1.0.2
Mahara Mahara=1.1.0-beta1
Mahara Mahara=1.0.3
Mahara Mahara=1.1.0-rc2
Mahara Mahara=1.1.1
Mahara Mahara=1.1.0-beta3
Mahara Mahara=1.1.0-alpha1
Mahara Mahara=1.1.0-alpha2
Mahara Mahara=1.0.7
Mahara Mahara=1.0.0
Mahara Mahara=1.1.0
Mahara Mahara=1.1.0-beta2
Mahara Mahara=1.1.0-rc1
Remediation
Patch Available
Event History
Mar 11, 2009
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:19 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0660?
CVE-2009-0660 has a medium severity rating due to its potential for XSS attacks.
2
How do I fix CVE-2009-0660?
To fix CVE-2009-0660, upgrade Mahara to versions 1.0.10 or 1.1.2 or later.
3
Which versions of Mahara are affected by CVE-2009-0660?
CVE-2009-0660 affects Mahara versions 1.0.0 to 1.0.9 and versions 1.1.0-beta1 to 1.1.1.
4
What types of vulnerabilities does CVE-2009-0660 include?
CVE-2009-0660 includes multiple cross-site scripting (XSS) vulnerabilities that allow script injection.
5
Can CVE-2009-0660 be exploited by remote attackers?
Yes, CVE-2009-0660 can be exploited by remote attackers to inject arbitrary web scripts or HTML.