Test ID:	1.3.6.1.4.1.25623.1.0.100334
Category:	Web application abuses
Title:	Mahara Multiple Vulnerabilities
Summary:	Mahara is prone to a security-bypass and; cross-site scripting vulnerability.
Description:	Summary: Mahara is prone to a security-bypass and cross-site scripting vulnerability. Vulnerability Impact: An attacker can exploit this issue to reset the application's administrator password or to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Affected Software/OS: Versions prior to Mahara 1.0.13 and 1.1.7 are affected. Solution: The vendor has released updates. Please see the references for details. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3298 BugTraq ID: 36893 http://www.securityfocus.com/bid/36893 Debian Security Information: DSA-1924 (Google Search) http://www.debian.org/security/2009/dsa-1924 http://www.osvdb.org/59584 http://secunia.com/advisories/37217 http://secunia.com/advisories/37218 http://www.vupen.com/english/advisories/2009/3101 Common Vulnerability Exposure (CVE) ID: CVE-2009-3299 BugTraq ID: 36892 http://www.securityfocus.com/bid/36892 http://www.osvdb.org/59583
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.