ZeroBox Vulnerability Database

漏洞起因
访问验证错误
 
影响系统
Mahara Mahara 1.1.6
Mahara Mahara 1.1.5
Mahara Mahara 1.1.4
Mahara Mahara 1.1.3
Mahara Mahara 1.1.2
Mahara Mahara 1.1.1
Mahara Mahara 1.0.12
Mahara Mahara 1.0.11
Mahara Mahara 1.0.10
Mahara Mahara 1.0.9
Mahara Mahara 1.0.8
Mahara Mahara 1.0.6
Mahara Mahara 1.0.5
Mahara Mahara 1.0.4
Mahara Mahara 1.0.3
Mahara Mahara 1.0.2
Mahara Mahara 1.0.1
 
不受影响系统
Mahara Mahara 1.1.7
Mahara Mahara 1.0.13
 
危害
远程攻击者可以利用漏洞重设密码控制应用程序。
 
攻击所需条件
攻击者必须访问Mahara。
 
漏洞信息
Mahara是一款开源的电子文件夹，网络日志，履历表生成器和社会化网络系统。
Mahara存在一个未明的安全漏洞，远程攻击者可以重设站点管理员密码，导致完全控制应用系统。
 
测试方法
 
厂商解决方案
用户可联系供应商升级到最新版本：
Mahara Mahara 1.0.10
Mahara mahara-1.0.13.zip
https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip
Mahara Mahara 1.0.11
Mahara mahara-1.0.13.zip
https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip
Mahara Mahara 1.0.12
Mahara mahara-1.0.13.zip
https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip
Mahara Mahara 1.0.2
Mahara mahara-1.0.13.zip
https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip
Mahara Mahara 1.0.3
Mahara mahara-1.0.13.zip
https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip
Mahara Mahara 1.0.4
Mahara mahara-1.0.13.zip
https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip
Mahara Mahara 1.0.5
Mahara mahara-1.0.13.zip
https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip
Mahara Mahara 1.0.6
Mahara mahara-1.0.13.zip
https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip
Mahara Mahara 1.0.8
Mahara mahara-1.0.13.zip
https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip
Mahara Mahara 1.0.9
Mahara mahara-1.0.13.zip
https://eduforge.org/frs/download.php/1053/mahara-1.0.13.zip
Mahara Mahara 1.1.1
Mahara mahara-1.1.7.zip
https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip
Mahara Mahara 1.1.2
Mahara mahara-1.1.7.zip
https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip
Mahara Mahara 1.1.3
Mahara mahara-1.1.7.zip
https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip
Mahara Mahara 1.1.4
Mahara mahara-1.1.7.zip
https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip
Mahara Mahara 1.1.5
Mahara mahara-1.1.7.zip
https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip
Mahara Mahara 1.1.6
Mahara mahara-1.1.7.zip
https://eduforge.org/frs/download.php/1056/mahara-1.1.7.zip
 
漏洞提供者
Ruslan Kabalin