https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-08T22:43:50.882043+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2011-1404 fkie_cve-2011-1404 2026-10-08T22:43:50.912834+00:00

Mahara before 1.3.6 does not properly restrict the data in responses to AJAX calls, which allows remote authenticated users to obtain sensitive information via a request associated with (1) blocktype/myfriends/myfriends.json.php, (2) json/usersearch.php, (3) group/membersearchresults.json.php, or (4) json/friendsearch.php, as demonstrated by information about friends and e-mail addresses.

 https://db.gcve.eu/vuln/ghsa-fjwm-vprq-674q GHSA-fjwm-vprq-674q 2026-10-08T22:43:50.912944+00:00

Mahara before 1.3.6 does not properly restrict the data in responses to AJAX calls, which allows remote authenticated users to obtain sensitive information via a request associated with (1) blocktype/myfriends/myfriends.json.php, (2) json/usersearch.php, (3) group/membersearchresults.json.php, or (4) json/friendsearch.php, as demonstrated by information about friends and e-mail addresses.

 https://db.gcve.eu/vuln/gsd-2011-1404 gsd-2011-1404 2026-10-08T22:43:50.912969+00:00 gsd-2011-1404