CVE-2010-0400

Publication date 7 April 2010

Last updated 24 July 2024

Ubuntu priority

Description

SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username.

Show unmaintained releases

Package	Ubuntu Release	Status
mahara	10.04 LTS lucid	Not affected
	9.10 karmic	Fixed 1.1.5-1ubuntu0.2
	9.04 jaunty	Fixed 1.0.9-2ubuntu0.6
	8.10 intrepid	Ignored end of life, was needed
	8.04 LTS hardy	Not in release
	6.06 LTS dapper	Not in release