This bug was fixed in the package mahara - 1.1.5-1ubuntu0.2
---------------
mahara (1.1.5-1ubuntu0.2) karmic-security; urgency=low
* SECURITY UPDATE: SQL injection (LP: #556369)
- debian/patches/CVE-2010-0400.dpatch: fix from upstream
- CVE-2010-0400
-- Francois Marier <[email protected]> Tue, 06 Apr 2010 22:35:16 +1200
** Changed in: mahara (Ubuntu Karmic)
Status: Confirmed => Fix Released
** Changed in: mahara (Ubuntu Jaunty)
Status: Confirmed => Fix Released
--
SQL injection in username field
https://bugs.launchpad.net/bugs/556369
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs