CVE-2021-43498

CVE-2021-43498 affects ATutor 2.2.4 in password_reminder.php. The vulnerability is an access-control issue triggered when the POST parameters g, id, h, form_password_hidden, and form_change are set. Documentation consistently describes an unauthorized access condition but does not provide exploit...

CVE-2021-43498

An Access Control vulnerability exists in ATutor 2.2.4 in passwordreminder.php when the g, id, h, formpasswordhidden, and formchange HTTP POST parameters are set...

ATutor 授权问题漏洞

ATutor is a set of open source Web-based Learning Content Management System LCMS from the ATutor Atutor team. The system includes modules for teaching content management, forums, and chat rooms. A security vulnerability exists in ATutor 2.2.4 that stems from an access control vulnerability in...

CVE-2020-23341

A reflected cross site scripting XSS vulnerability in the /header.tmpl.php component of ATutor 2.2.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2020-23341

A reflected cross site scripting XSS vulnerability in the /header.tmpl.php component of ATutor 2.2.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Cross site scripting

A reflected cross site scripting XSS vulnerability in the /header.tmpl.php component of ATutor 2.2.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2020-23341

CVE-2020-23341 is a reflected XSS vulnerability in ATutor 2.2.4, specifically in the /header.tmpl.php component. The provided documents state that an attacker can craft input to cause the execution of arbitrary web scripts or HTML in the victim’s browser. The Red Hat, NVD, OSV, and other feeds co...

CVE-2020-23341

A reflected cross site scripting XSS vulnerability in the /header.tmpl.php component of ATutor 2.2.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

ATutor 跨站脚本漏洞

ATutor is a set of open source Web-based Learning Content Management System LCMS from the ATutor Atutor team. The system includes modules for teaching content management, forums, chat rooms, and more. A cross-site scripting vulnerability exists in ATutor, which stems from the failure of the...

ATutor SQL Injection (CVE-2016-2555)

An SQL injection vulnerability exists in ATutor. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

ATutor 2.2.4 CVE-2019-12169 - Remote Code Execution

This Metasploit module exploits an arbitrary file upload vulnerability together with a directory traversal flaw in ATutor This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ATutor 2.2.4 - Director...

ATutor 2.2.4 Directory Traversal / Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ATutor 2.2.4 - Directory Traversal / Remote Code Execution, ', 'Description' = %q This module exploits an arbitrary file upload vulnerability...

ATutor 2.2.4 Directory Traversal / Remote Code Execution Exploit

This Metasploit module exploits an arbitrary file upload vulnerability together with a directory traversal flaw in ATutor versions 2.2.4, 2.2.2 and 2.2.1 in order to execute arbitrary commands. This module requires Metasploit: https://metasploit.com/download Current source:...

ATutor 2.2.4 - Directory Traversal / Remote Code Execution,

This module exploits an arbitrary file upload vulnerability together with a directory traversal flaw in ATutor versions 2.2.4, 2.2.2 and 2.2.1 in order to execute arbitrary commands. It first creates a zip archive containing a malicious PHP file. The zip archive takes advantage of a directory...

ATutor LMS 2.2.4 Weak Password Reset Hash

Exploit Title: ATutor LMS 2.2.4 - Weak Password Reset Hash Date: 2020-05-05 Exploit Author: Hodorsec Version: 2.2.4 Software Link: https://atutor.github.io/atutor/downloads.html Vendor Homepage: https://atutor.github.io Tested on: Debian 10 x64 - PHP 7.3.15-3 Problem: While the original intention...

CVE-2015-1583

Multiple cross-site request forgery CSRF vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrators for requests that 1 create an administrator account via a request to mods/core/users/admins/create.php or 2 create a user account via a request to...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrators for requests that 1 create an administrator account via a request to mods/core/users/admins/create.php or 2 create a user account via a request to...

CVE-2015-1583

Multiple cross-site request forgery CSRF vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrators for requests that 1 create an administrator account via a request to mods/core/users/admins/create.php or 2 create a user account via a request to...

CVE-2015-1583

ATutor LCMS 2.2 is affected by CSRF in two admin-facing endpoints (mods/_core/users/admins/create.php and mods/_core/users/create_user.php). The root cause is cross-site request forgery that allows an authenticated admin context to create either another administrator (super admin) or a new instru...

ATutor 2.2.4 - (id) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: ATutor 2.2.4 - 'id' SQL Injection Exploit Author: Andrey Stoykov Vendor Homepage: https://atutor.github.io/ Software Link: https://sourceforge.net/projects/atutor/files/latest/download Version: ATutor 2.2.4 Tested on: LAMP on...