• info
• discussion
• exploit
• solution
• references

Mahara Username Generation SQL Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.com.


Debian Linux 5.0 ia-64

• Debian mahara-apache2_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara-apache2_1 .0.4-4+lenny5_all.deb


• Debian mahara_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+l enny5_all.deb

Debian Linux 5.0 alpha

• Debian mahara-apache2_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara-apache2_1 .0.4-4+lenny5_all.deb


• Debian mahara_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+l enny5_all.deb

Debian Linux 5.0 ia-32

• Debian mahara-apache2_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara-apache2_1 .0.4-4+lenny5_all.deb


• Debian mahara_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+l enny5_all.deb

Debian Linux 5.0 s/390

• Debian mahara-apache2_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara-apache2_1 .0.4-4+lenny5_all.deb


• Debian mahara_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+l enny5_all.deb

Debian Linux 5.0 mipsel

• Debian mahara-apache2_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara-apache2_1 .0.4-4+lenny5_all.deb


• Debian mahara_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+l enny5_all.deb

Debian Linux 5.0 hppa

• Debian mahara-apache2_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara-apache2_1 .0.4-4+lenny5_all.deb


• Debian mahara_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+l enny5_all.deb

Debian Linux 5.0 m68k

• Debian mahara-apache2_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara-apache2_1 .0.4-4+lenny5_all.deb


• Debian mahara_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+l enny5_all.deb

Debian Linux 5.0 arm

• Debian mahara-apache2_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara-apache2_1 .0.4-4+lenny5_all.deb


• Debian mahara_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+l enny5_all.deb

Debian Linux 5.0 armel

• Debian mahara-apache2_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara-apache2_1 .0.4-4+lenny5_all.deb


• Debian mahara_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+l enny5_all.deb

Debian Linux 5.0

• Debian mahara-apache2_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara-apache2_1 .0.4-4+lenny5_all.deb


• Debian mahara_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+l enny5_all.deb

Debian Linux 5.0 amd64

• Debian mahara-apache2_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara-apache2_1 .0.4-4+lenny5_all.deb


• Debian mahara_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+l enny5_all.deb

Debian Linux 5.0 mips

• Debian mahara-apache2_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara-apache2_1 .0.4-4+lenny5_all.deb


• Debian mahara_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+l enny5_all.deb

Debian Linux 5.0 powerpc

• Debian mahara-apache2_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara-apache2_1 .0.4-4+lenny5_all.deb


• Debian mahara_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+l enny5_all.deb

Debian Linux 5.0 sparc

• Debian mahara-apache2_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara-apache2_1 .0.4-4+lenny5_all.deb


• Debian mahara_1.0.4-4+lenny5_all.deb
  http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+l enny5_all.deb