Unrated severityNVD Advisory· Published Apr 23, 2009· Updated Jun 16, 2026
CVE-2009-0664
CVE-2009-0664
Description
Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.0.x before 1.0.11 and 1.1.x before 1.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the introduction field in a user profile or (2) an arbitrary text block in a user view.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
23cpe:2.3:a:mahara:mahara:1.0.0:*:*:*:*:*:*:*+ 22 more
- cpe:2.3:a:mahara:mahara:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.1.0:alpha1:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.1.0:alpha2:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.1.0:alpha3:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.1.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.1.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.1.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.1.0:beta4:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.1.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.1.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:mahara:mahara:1.1.2:*:*:*:*:*:*:*
- (no CPE)range: <1.0.11, <1.1.3
Patches
Vulnerability mechanics
References
7- www.securityfocus.com/bid/34677nvdPatch
- secunia.com/advisories/34789nvdVendor Advisory
- www.debian.org/security/2009/dsa-1778nvdVendor Advisory
- mahara.org/interaction/forum/topic.phpnvd
- osvdb.org/53891nvd
- osvdb.org/53892nvd
- secunia.com/advisories/34871nvd
News mentions
0No linked articles in our index yet.