CVE-2012-2239 | BDVDB-2026-53616 Detail

Description#

Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows remote attackers to read arbitrary files or create TCP connections via an XML external entity (XXE) injection attack, as demonstrated by reading config.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.debian.org/security/2012/dsa-2591
https://bugs.launchpad.net/mahara/+bug/1047111
https://mahara.org/interaction/forum/topic.php?id=4869

Exploit#

No public exploit known

History#

Version 12012-11-24Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.