Forums | Mahara Community

Security Announcements /
SQL injection in 1.1.8 and 1.2.4


This topic is closed. Only moderators and the group administrators can post new replies.
François Marier's profile picture
Posts: 411

02 July 2010, 0:05

Category: SQL injection
Severity: Medium
Versions affected: < 1.1.9, < 1.2.5
Reported by: Mahara Team
Identifier: CVE-2010-1669

As part of a major security review, the Mahara team has identified a SQL injection bug in the 1.1 and 1.2 series of Mahara (the 1.0 series is not affected).

Upgrading to Mahara 1.1.9 or 1.2.5 is recommended for all sites.

1 result