1. Skip to navigation
  2. Skip to content
  3. Skip to secondary-content

Where You Are

  1. Home
  2. Security
  3. Security Lab
  4. Latest Threats
  5. Vulnerability Descriptions
  6. SA200905924

Mahara Privilege Escalation and Cross-Site Scripting

Report ID: SA200905924
Source: Secunia
Date of Discovery: 02.11.2009
Criticality: Low
Affects:
Mahara 1.x
Compromise From: From remote
Compromise Type: Privilege escalation
Cross site scripting

Summary

Some vulnerabilities have been reported in Mahara, which can be exploited by malicious users to gain escalated privileges and by malicious people to conduct cross-site scripting attacks.

Detailed Description

1) Input passed to the "resume blocktype" is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

2) The application does not properly restrict institution administrators from resetting the site administrator's password, which can be exploited to e.g. gain escalated privileges.

Solution

Update to version 1.0.13 or 1.1.7.
http://eduforge.org/frs/?group_id=176