Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows... · CVE-2012-2239 · GitHub Advisory Database · GitHub

Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows...

Moderate severity Unreviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Feb 23, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows remote attackers to read arbitrary files or create TCP connections via an XML external entity (XXE) injection attack, as demonstrated by reading config.php.

References

Published by the National Vulnerability Database

Nov 24, 2012

Published to the GitHub Advisory Database May 17, 2022

Last updated Feb 23, 2024