الباحثون
رجوع
Ajay Singh Negi
#24982
من 60,574
11.1
إجمالي CVSS
الثغرات
·
2
متوسطة
2
PT-2012-3902
2012-11-24
4.3
CVE-2012-2243
Catalyst It
Mahara
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML by uploading an XML file with the xhtml extension, which is rendered inline as script.
PT-2012-3904
2012-11-24
6.8
CVE-2012-2246
Catalyst It
Mahara
The issue allows remote attackers to conduct clickjacking attacks, enabling them to delete arbitrary users and bypass CSRF protection via the "account/delete.php" endpoint.