Vulners
Lucene search
ATutor 1.6.4 Cross Site Scripting
`
Dear Sir / Madam
The Itsecteam has discovered 3 new bugs in ATutor 1.6.4 CMS and will be
glad to report and public them .
more information about these bugs are listed below :
Topic : ATutor 1.6.4
Bugs Type : Cross Site Scripting (all of them)
Credit : ItSecTeam
Remote : Yes
Status : Bug
# mail : [email protected]
# Dork : "ATutor 1.6.4"
#Special Tnx : am!rkh@n, Amin Shokohi(Pejvak), C0M0D0 , 0xd41684c654 ,
r3dmove And All It Security Team Members
#Website : WwW.ITSecTeam.com<http://www.itsecteam.com/>
########################## Exploit #############################
the bugs can be explited as below:
#1: After logging in as an instructor go to manage section and add a poll and inject your XSS code as a questaion or choices.
#2: After logging in as an instructor go to manage section and Create a new Group and inject your XSS code as title or group type.
#3: After logging in as an instructor go to manage section and Add an Assignment with XSS code as title.
--
With Best Regards
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
11 Mar 2010 00:00Current
0.2Low risk
Vulners AI Score0.2