CVE-2007-0381
Published Jan 19, 2007Multiple SQL injection vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters. NOTE: CVE analysis suggests that the…
Vendor/product archive
adaptive_technology_resource_centre / atutor CVEs
Beta · best-effort15 CVEs tagged to adaptive_technology_resource_centre / atutor — 0 Critical, 7 High, 7 Medium, 1 Low, 0 Unrated.
CVE-2006-5734
Published Nov 6, 2006Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) section parameter in (a) documentati…
CVE-2006-3996
Published Aug 5, 2006SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) desc or (2) asc parame…
CVE-2006-3821
Published Jul 25, 2006Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in (a) index_list.php…
CVE-2006-3662
Published Jul 18, 2006SQL injection vulnerability in index.php in ATutor 1.5.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter. NOTE: this issue has been disputed by the…
CVE-2006-3484
Published Jul 10, 2006Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) show_courses or (2) current_ca…
CVE-2005-4155
Published Dec 11, 2005registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address that ends in a NULL character, which bypasses the PHP regular…
CVE-2005-3403
Published Nov 1, 2005Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to inject arbitrary web script or HTML via (1) the _base_href paramete…
CVE-2005-3404
Published Nov 1, 2005Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrary files via the section parameter followed by a null byte (…
CVE-2005-3405
Published Nov 1, 2005ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum.inc.php with a modified addslashes parameter with either th…
CVE-2005-2954
Published Sep 16, 2005SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbitrary SQL commands via the email field.
CVE-2005-2955
Published Sep 16, 2005config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which allows authenticated administrators or ed…
CVE-2005-2956
Published Sep 16, 2005ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and predictable filenames, which allows remote…
CVE-2005-2649
Published Aug 23, 2005Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML via (1) course parameter in login.php or (2) words paramete…
CVE-2005-2044
Published Jun 16, 2005Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitrary web script or HTML via the (1) show_course parameter to…
Showing 1-15 of 15 CVEsPage 1 of 1