Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

mahara: cross-site scripting and cross-site request forgery

Package(s):

mahara

CVE #(s):

CVE-2011-0439 CVE-2011-0440

Created:

March 30, 2011

Updated:

March 30, 2011

Description:

The "mahara" social networking system suffers from cross-site scripting and cross-site request forgery vulnerabilities which, among other things, can allow an attacker to force the deletion of weblogs.

Alerts:

Debian

DSA-2206-1

2011-03-29

(Log in to post comments)