CVE-2010-0400

Published: 7 April 2010

SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username.

Priority

Package	Release	Status
mahara Launchpad, Ubuntu, Debian	dapper	Does not exist
	hardy	Does not exist
	intrepid	Ignored (end of life, was needed)
	jaunty	Released (1.0.9-2ubuntu0.6)
	karmic	Released (1.1.5-1ubuntu0.2)
	lucid	Not vulnerable (1.2.4-1)
	upstream	Released (1.0.14, 1.1.8, 1.2.4)

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.