Launchpad.net

CVE 2010-1669

SQL injection vulnerability in Mahara 1.1.x before 1.1.9 and 1.2.x before 1.2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

See the CVE page on Mitre.org for more details.