İçeriğe atla
Noroxi

Mahara kayıtları

mahara üreticisine ait 109 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%27,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

109 kayıt
  • CVE-2017-1000171
    39İzleyin

    Mahara Mobile before 1.2.1 is vulnerable to passwords being sent to the Mahara access log in plain text.

    KritikCVSS 9,8İstismar yokEPSS %1

    mahara · mahara mobile3 Kas 2017

  • CVE-2021-40849
    39İzleyin

    In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, the account associated with a web services token is vulnerable to being exploited a

    KritikCVSS 9,8İstismar yokEPSS %1

    mahara · mahara3 Kas 2021

  • CVE-2017-1000154
    39İzleyin

    Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to some authentication methods, which do not us

    KritikCVSS 9,8İstismar yokEPSS %1

    mahara · mahara3 Kas 2017

  • CVE-2017-1000152
    39İzleyin

    Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 running PHP 5.3 are vulnerable to one user being logged in as another user on a separat

    KritikCVSS 9,8İstismar yokEPSS %1

    mahara · mahara3 Kas 2017

  • CVE-2017-1000153
    39İzleyin

    Mahara 15.04 before 15.04.10 and 15.10 before 15.10.6 and 16.04 before 16.04.4 are vulnerable to incorrect access control after the password

    KritikCVSS 9,8İstismar yokEPSS %1

    mahara · mahara3 Kas 2017

  • CVE-2022-44544
    39İzleyin

    Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0 potentially allow a PDF export to trigger

    KritikCVSS 9,8İstismar yokEPSS %0

    mahara · mahara6 Kas 2022

  • CVE-2022-45134
    39İzleyin

    Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 deserializes user input unsafely during skin import.

    KritikCVSS 9,8İstismar yokEPSS %0

    mahara · mahara22 Ağu 2025

  • CVE-2012-2239
    36İzleyin

    Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows remote attackers to read arbitrary files or create TCP connections via an XML extern

    KritikCVSS 9,1İstismar yokEPSS %1

    mahara · mahara24 Kas 2012

  • CVE-2024-39335
    36İzleyin

    Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed to an institution a

    KritikCVSS 9,1İstismar yokEPSS %0

    mahara · mahara26 Ağu 2025

  • CVE-2017-1000148
    35İzleyin

    Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to PHP code execution as Mahara would pass port

    YüksekCVSS 8,8İstismar yokEPSS %1

    mahara · mahara3 Kas 2017

  • CVE-2017-14163
    35İzleyin

    An issue was discovered in Mahara before 15.04.14, 16.x before 16.04.8, 16.10.x before 16.10.5, and 17.x before 17.04.3.

    YüksekCVSS 8,8İstismar yokEPSS %0

    mahara · mahara31 Eki 2017

  • CVE-2017-1000150
    35İzleyin

    Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 are vulnerable to prevent session IDs from being regenerated on login or logout.

    YüksekCVSS 8,8İstismar yokEPSS %0

    mahara · mahara3 Kas 2017

  • CVE-2022-28892
    35İzleyin

    Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 is vulnerable to Cross Site Request Forgery (CSRF) because randomly generated tokens ar

    YüksekCVSS 8,8İstismar yokEPSS %0

    mahara · mahara28 Nis 2022

  • CVE-2024-47853
    35İzleyin

    An issue was discovered in Mahara 23.04.8 and 24.04.4.

    YüksekCVSS 8,8İstismar yokEPSS %0

    mahara · mahara26 Ağu 2025

  • CVE-2017-1000134
    32İzleyin

    Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable because group members can lose a

    YüksekCVSS 8,1İstismar yokEPSS %0

    mahara · mahara3 Kas 2017

  • CVE-2017-1000139
    32İzleyin

    Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to server-side request forgery a

    YüksekCVSS 8,0İstismar yokEPSS %0

    mahara · mahara3 Kas 2017

  • CVE-2010-0400
    31İzleyin

    SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username.

    YüksekCVSS 7,5İstismar yokEPSS %1

    mahara · mahara7 Nis 2010

  • CVE-2021-40848
    31İzleyin

    In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain characters that a spreadsheet program could interp

    YüksekCVSS 7,8İstismar yokEPSS %0

    mahara · mahara3 Kas 2021

  • CVE-2010-1670
    30İzleyin

    Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 has improper configuration options for authentication plugins associated wi

    YüksekCVSS 7,5İstismar yokEPSS %1

    mahara · mahara6 Tem 2010

  • CVE-2010-1669
    30İzleyin

    SQL injection vulnerability in Mahara 1.1.x before 1.1.9 and 1.2.x before 1.2.5 allows remote attackers to execute arbitrary SQL commands vi

    YüksekCVSS 7,5İstismar yokEPSS %1

    mahara · mahara6 Tem 2010

  • CVE-2022-33913
    30İzleyin

    In Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2, files can sometimes be downloaded through thumb.php with no permission ch

    YüksekCVSS 7,5İstismar yokEPSS %1

    mahara · mahara20 Haz 2022

  • CVE-2017-1000151
    30İzleyin

    Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to passwords or other sensitive information bei

    YüksekCVSS 7,5İstismar yokEPSS %1

    mahara · mahara3 Kas 2017

  • CVE-2017-1000133
    30İzleyin

    Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to a user - in some circumstances causing anoth

    YüksekCVSS 7,5İstismar yokEPSS %1

    mahara · mahara3 Kas 2017

  • CVE-2022-29585
    30İzleyin

    In Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0, a site using Isolated Institutions is vulnerable if more than ten groups are used.

    YüksekCVSS 7,5İstismar yokEPSS %1

    mahara · mahara28 Nis 2022

  • CVE-2018-11196
    30İzleyin

    Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 can be used as medium to transmit viruses by placing infected

    YüksekCVSS 7,5İstismar yokEPSS %0

    mahara · mahara1 Haz 2018