CVE-2010-1669: SQL Injection
Published Jul 6, 2010
·Updated
SQL injection vulnerability in Mahara 1.1.x before 1.1.9 and 1.2.x before 1.2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
31 affected components
Mahara Mahara=1.1.0-beta4
Mahara Mahara=1.1.6
Mahara Mahara=1.1.2
Mahara Mahara=1.1.7
Mahara Mahara=1.1.0-alpha3
Mahara Mahara=1.1.4
Mahara Mahara=1.1.0-beta1
Mahara Mahara=1.1.0-rc2
Mahara Mahara=1.1.1
Mahara Mahara=1.1.8
Mahara Mahara=1.1.0-beta3
Mahara Mahara=1.1.0-alpha1
Mahara Mahara=1.1.0-alpha2
Mahara Mahara=1.1.3
Mahara Mahara=1.1.0
Mahara Mahara=1.1.5
Mahara Mahara=1.1.0-beta2
Mahara Mahara=1.1.0-rc1
Mahara Mahara=1.2.0
Mahara Mahara=1.2.3
Mahara Mahara=1.2.1
Mahara Mahara=1.2.0-rc1
Mahara Mahara=1.2.0-alpha1
Mahara Mahara=1.2.0-alpha2
Mahara Mahara=1.2.0-beta4
Mahara Mahara=1.2.0-alpha3
Mahara Mahara=1.2.0-beta2
Mahara Mahara=1.2.4
Mahara Mahara=1.2.2
Mahara Mahara=1.2.0-beta1
Mahara Mahara=1.2.0-beta3
Remediation
Patch Available
Event History
Jul 6, 2010
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-1669?
CVE-2010-1669 is categorized as a critical SQL injection vulnerability allowing remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2010-1669?
To remediate CVE-2010-1669, upgrade Mahara to version 1.1.9 or later, or 1.2.5 or later.
3
What versions of Mahara are affected by CVE-2010-1669?
CVE-2010-1669 affects Mahara versions 1.1.x prior to 1.1.9 and 1.2.x prior to 1.2.5.
4
Can CVE-2010-1669 be exploited remotely?
Yes, CVE-2010-1669 can be exploited remotely by attackers targeting unspecified vectors.
5
Is there any indication of active exploitation of CVE-2010-1669?
As of the last updates, there was no specific indication of active exploitation of CVE-2010-1669.