CVE-2018-11196

Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 can be used as medium to transmit viruses by placing infected files into a Leap2A archive and uploading that to Mahara. In contrast to other ZIP files that are uploaded, ClamAV (when activated) does not check Leap2A archives for viruses, allowing malicious files to be available for download. While files cannot be executed on Mahara itself, Mahara can be used to transfer such files to user computers.

• CWE-434

• https://bugs.launchpad.net/bugs/1770535Issue Tracking, Patch, Vendor Advisory
• https://mahara.org/interaction/forum/topic.php?id=8270Vendor Advisory
• https://bugs.launchpad.net/bugs/1770535Issue Tracking, Patch, Vendor Advisory
• https://mahara.org/interaction/forum/topic.php?id=8270Vendor Advisory

Published

Jun 1, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11190Quest DR Series Disk Backup software version before 4.0.3.1 …
• CVE-2018-11191Quest DR Series Disk Backup software version before 4.0.3.1 …
• CVE-2018-11192Quest DR Series Disk Backup software version before 4.0.3.1 …
• CVE-2018-11193Quest DR Series Disk Backup software version before 4.0.3.1 …
• CVE-2018-11194Quest DR Series Disk Backup software version before 4.0.3.1 …
• CVE-2018-11195Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.…
• CVE-2018-11198An issue was discovered in Mautic 2.13.1. There is Stored XS…
• CVE-2018-1120A flaw was found affecting the Linux kernel before version 4…2.8
• CVE-2018-11200An issue was discovered in Mautic 2.13.1. It has Stored XSS …6.1
• CVE-2018-11202A NULL pointer dereference was discovered in H5S_hyper_make_…
• CVE-2018-11203A division by zero was discovered in H5D__btree_decode_key i…
• CVE-2018-11204A NULL pointer dereference was discovered in H5O__chunk_dese…