CVE-2009-0664: XSS
Published Apr 23, 2009
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the introduction field in a user profile or (2) an arbitrary text block in a user view.
Affected Software
22 affected components
Mahara Mahara=1.0.0
Mahara Mahara=1.0.1
Mahara Mahara=1.0.2
Mahara Mahara=1.0.3
Mahara Mahara=1.0.4
Mahara Mahara=1.0.5
Mahara Mahara=1.0.6
Mahara Mahara=1.0.7
Mahara Mahara=1.0.8
Mahara Mahara=1.0.9
Mahara Mahara=1.0.10
Mahara Mahara=1.1.0-alpha1
Mahara Mahara=1.1.0-alpha2
Mahara Mahara=1.1.0-alpha3
Mahara Mahara=1.1.0-beta1
Mahara Mahara=1.1.0-beta2
Mahara Mahara=1.1.0-beta3
Mahara Mahara=1.1.0-beta4
Mahara Mahara=1.1.0-rc1
Mahara Mahara=1.1.0-rc2
Mahara Mahara=1.1.1
Mahara Mahara=1.1.2
Remediation
Patch Available
Event History
Apr 23, 2009
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-0664?
The severity of CVE-2009-0664 is considered moderate due to the potential for cross-site scripting attacks.
2
How do I fix CVE-2009-0664?
To fix CVE-2009-0664, upgrade Mahara to version 1.0.11 or 1.1.3 or newer.
3
What types of vulnerabilities are associated with CVE-2009-0664?
CVE-2009-0664 is associated with multiple cross-site scripting (XSS) vulnerabilities.
4
Which Mahara versions are affected by CVE-2009-0664?
Mahara versions 1.0.0 through 1.0.10 and 1.1.0 through 1.1.2 are affected by CVE-2009-0664.
5
Can CVE-2009-0664 be exploited remotely?
Yes, CVE-2009-0664 can be exploited remotely by attackers to inject malicious scripts.