Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code execution via shell metacharacters in a collection name. Additional, in Mahara before 20.10.4, 21.04.3, and 21.10.1, exporting collections via PDF export could cause code execution
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Catalyst IT Mahara 操作系统命令注入漏洞
Vulnerability Description
Catalyst IT Mahara是新西兰Catalyst IT公司的一套社交网络系统。该系统包含博客、履历表生成器、文件管理器等。 Mahara 存在操作系统命令注入漏洞，攻击者可以通过"SCRIPT"元素进行跨站脚本攻击。以下产品及版本受到影响：Mahara 20.04.5 版本之前，20.10.3 版本之前，21.04.2 版本之前和 21.10.0 版本之前。
CVSS Information
N/A
Vulnerability Type
N/A