CVE-2012-2239
EUVD-2012-223224.11.2012, 20:55
Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows remote attackers to read arbitrary files or create TCP connections via an XML external entity (XXE) injection attack, as demonstrated by reading config.php.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mahara | mahara | 1.4.0 ≤ 𝑥 < 1.4.4 |
| mahara | mahara | 1.5.0 ≤ 𝑥 < 1.5.3 |
| debian | debian_linux | 6.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases