CVE-2011-2771
Summary
| CVE | CVE-2011-2771 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2011-11-15 03:57:55 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Multiple cross-site scripting (XSS) vulnerabilities in Mahara before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) URI attributes and (2) the External Feed component, as demonstrated by the guid element in an RSS feed. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mahara | Mahara | 0.9.0 | All | All | All |
| Application | Mahara | Mahara | 0.9.1 | All | All | All |
| Application | Mahara | Mahara | 0.9.2 | All | All | All |
| Application | Mahara | Mahara | 1.0.0 | All | All | All |
| Application | Mahara | Mahara | 1.0.1 | All | All | All |
| Application | Mahara | Mahara | 1.0.10 | All | All | All |
| Application | Mahara | Mahara | 1.0.11 | All | All | All |
| Application | Mahara | Mahara | 1.0.12 | All | All | All |
| Application | Mahara | Mahara | 1.0.13 | All | All | All |
| Application | Mahara | Mahara | 1.0.14 | All | All | All |
| Application | Mahara | Mahara | 1.0.15 | All | All | All |
| Application | Mahara | Mahara | 1.0.2 | All | All | All |
| Application | Mahara | Mahara | 1.0.3 | All | All | All |
| Application | Mahara | Mahara | 1.0.4 | All | All | All |
| Application | Mahara | Mahara | 1.0.5 | All | All | All |
| Application | Mahara | Mahara | 1.0.6 | All | All | All |
| Application | Mahara | Mahara | 1.0.7 | All | All | All |
| Application | Mahara | Mahara | 1.0.8 | All | All | All |
| Application | Mahara | Mahara | 1.0.9 | All | All | All |
| Application | Mahara | Mahara | 1.1 | All | All | All |
| Application | Mahara | Mahara | 1.1.0 | All | All | All |
| Application | Mahara | Mahara | 1.1.0 | alpha1 | All | All |
| Application | Mahara | Mahara | 1.1.0 | alpha2 | All | All |
| Application | Mahara | Mahara | 1.1.0 | alpha3 | All | All |
| Application | Mahara | Mahara | 1.1.0 | beta1 | All | All |
| Application | Mahara | Mahara | 1.1.0 | beta2 | All | All |
| Application | Mahara | Mahara | 1.1.0 | beta3 | All | All |
| Application | Mahara | Mahara | 1.1.0 | beta4 | All | All |
| Application | Mahara | Mahara | 1.1.0 | rc1 | All | All |
| Application | Mahara | Mahara | 1.1.0 | rc2 | All | All |
| Application | Mahara | Mahara | 1.1.1 | All | All | All |
| Application | Mahara | Mahara | 1.1.2 | All | All | All |
| Application | Mahara | Mahara | 1.1.3 | All | All | All |
| Application | Mahara | Mahara | 1.1.4 | All | All | All |
| Application | Mahara | Mahara | 1.1.5 | All | All | All |
| Application | Mahara | Mahara | 1.1.6 | All | All | All |
| Application | Mahara | Mahara | 1.1.7 | All | All | All |
| Application | Mahara | Mahara | 1.1.8 | All | All | All |
| Application | Mahara | Mahara | 1.1.9 | All | All | All |
| Application | Mahara | Mahara | 1.2.0 | All | All | All |
| Application | Mahara | Mahara | 1.2.0 | alpha1 | All | All |
| Application | Mahara | Mahara | 1.2.0 | alpha2 | All | All |
| Application | Mahara | Mahara | 1.2.0 | alpha3 | All | All |
| Application | Mahara | Mahara | 1.2.0 | beta1 | All | All |
| Application | Mahara | Mahara | 1.2.0 | beta2 | All | All |
| Application | Mahara | Mahara | 1.2.0 | beta3 | All | All |
| Application | Mahara | Mahara | 1.2.0 | beta4 | All | All |
| Application | Mahara | Mahara | 1.2.0 | rc1 | All | All |
| Application | Mahara | Mahara | 1.2.1 | All | All | All |
| Application | Mahara | Mahara | 1.2.2 | All | All | All |
| Application | Mahara | Mahara | 1.2.3 | All | All | All |
| Application | Mahara | Mahara | 1.2.4 | All | All | All |
| Application | Mahara | Mahara | 1.2.5 | All | All | All |
| Application | Mahara | Mahara | 1.2.6 | All | All | All |
| Application | Mahara | Mahara | 1.3.0 | All | All | All |
| Application | Mahara | Mahara | 1.3.0 | beta1 | All | All |
| Application | Mahara | Mahara | 1.3.0 | beta2 | All | All |
| Application | Mahara | Mahara | 1.3.0 | beta3 | All | All |
| Application | Mahara | Mahara | 1.3.0 | beta4 | All | All |
| Application | Mahara | Mahara | 1.3.0 | rc1 | All | All |
| Application | Mahara | Mahara | 1.3.1 | All | All | All |
| Application | Mahara | Mahara | 1.3.2 | All | All | All |
| Application | Mahara | Mahara | 1.3.3 | All | All | All |
| Application | Mahara | Mahara | 1.3.4 | All | All | All |
| Application | Mahara | Mahara | 1.3.5 | All | All | All |
| Application | Mahara | Mahara | 1.3.6 | All | All | All |
| Application | Mahara | Mahara | 1.3.7 | All | All | All |
| Application | Mahara | Mahara | 1.4 | rc1 | All | All |
| Application | Mahara | Mahara | 1.4 | rc2 | All | All |
| Application | Mahara | Mahara | 1.4 | rc3 | All | All |
| Application | Mahara | Mahara | 1.4 | rc4 | All | All |
| Application | Mahara | Mahara | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 404 Not Found | af854a3a-2127-422b-91ae-364da2661108 | security.debian.org | |
| Security Advisory SA46719 - Mahara Multiple Vulnerabilities - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| Bug #798136 “XSS in URI attributes in the externalfeed block” : Bugs : Mahara | af854a3a-2127-422b-91ae-364da2661108 | bugs.launchpad.net | Exploit, Patch |
| Debian -- Security Information -- DSA-2334-1 mahara | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| 1.4.1 : Mahara | af854a3a-2127-422b-91ae-364da2661108 | launchpad.net | Patch |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.