![]() |
Inicial ▼ Bookkeeping
Online ▼ Auditorias ▼
DNS
Administrado ▼
Acerca de DNS
Ordenar/Renovar
Preguntas Frecuentes
AUP
Dynamic DNS Clients
Configurar Dominios Dynamic DNS Update Password Monitoreo
de Redes ▼
Enterprise
Avanzado
Estándarr
Prueba
Preguntas Frecuentes
Resumen de Precio/Funciones
Ordenar
Muestras
Configure/Status Alert Profiles | ||
ID de Prueba: | 1.3.6.1.4.1.25623.1.0.100334 |
Categoría: | Web application abuses |
Título: | Mahara Multiple Vulnerabilities |
Resumen: | Mahara is prone to a security-bypass and; cross-site scripting vulnerability. |
Descripción: | Summary: Mahara is prone to a security-bypass and cross-site scripting vulnerability. Vulnerability Impact: An attacker can exploit this issue to reset the application's administrator password or to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Affected Software/OS: Versions prior to Mahara 1.0.13 and 1.1.7 are affected. Solution: The vendor has released updates. Please see the references for details. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P |
Referencia Cruzada: |
Common Vulnerability Exposure (CVE) ID: CVE-2009-3298 BugTraq ID: 36893 http://www.securityfocus.com/bid/36893 Debian Security Information: DSA-1924 (Google Search) http://www.debian.org/security/2009/dsa-1924 http://www.osvdb.org/59584 http://secunia.com/advisories/37217 http://secunia.com/advisories/37218 http://www.vupen.com/english/advisories/2009/3101 Common Vulnerability Exposure (CVE) ID: CVE-2009-3299 BugTraq ID: 36892 http://www.securityfocus.com/bid/36892 http://www.osvdb.org/59583 |
Copyright | Copyright (C) 2009 Greenbone AG |
Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |