CVE-2009-2170: XSS
Published Jun 23, 2009
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0 before 1.0.12 and 1.1 before 1.1.5 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected Software
27 affected components
Mahara Mahara=1.0.0
Mahara Mahara=1.0.1
Mahara Mahara=1.0.2
Mahara Mahara=1.0.3
Mahara Mahara=1.0.4
Mahara Mahara=1.0.5
Mahara Mahara=1.0.6
Mahara Mahara=1.0.7
Mahara Mahara=1.0.8
Mahara Mahara=1.0.9
Mahara Mahara=1.0.10
Mahara Mahara=1.0.11
Mahara Mahara=1.1
Mahara Mahara=1.1.0
Mahara Mahara=1.1.0-alpha1
Mahara Mahara=1.1.0-alpha2
Mahara Mahara=1.1.0-alpha3
Mahara Mahara=1.1.0-beta1
Mahara Mahara=1.1.0-beta2
Mahara Mahara=1.1.0-beta3
Mahara Mahara=1.1.0-beta4
Mahara Mahara=1.1.0-rc1
Mahara Mahara=1.1.0-rc2
Mahara Mahara=1.1.1
Mahara Mahara=1.1.2
Mahara Mahara=1.1.3
Mahara Mahara=1.1.4
Event History
Jun 23, 2009
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2170?
CVE-2009-2170 has a medium severity rating due to its potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2009-2170?
To fix CVE-2009-2170, upgrade Mahara to version 1.0.12 or 1.1.5 or later.
3
What types of vulnerabilities are associated with CVE-2009-2170?
CVE-2009-2170 is associated with multiple cross-site scripting (XSS) vulnerabilities.
4
Which versions of Mahara are affected by CVE-2009-2170?
CVE-2009-2170 affects Mahara versions 1.0.0 through 1.0.11 and versions 1.1.0 through 1.1.4.
5
Can CVE-2009-2170 be exploited by remote attackers?
Yes, CVE-2009-2170 can be exploited by remote attackers to inject arbitrary web scripts or HTML.