ATutor <= 1.6.1-pl1 (import.php) Remote File Inclusion Vulnerability

No description provided by source. ATutor Course Server Rfi AUTHOR : IRCRASH R3d.W0rm Discovered by : IRCRASH R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Script Download : www.atutor.ca DORK : Web site engine's code is copyright © 2001-2007 ATutor® Note : You...

ATutor 1.x forum.inc.php Arbitrary Command Execution

No description provided by source. source: http://www.securityfocus.com/bid/15221/info ATutor is prone to multiple vulnerabilities. These issues can allow remote attackers to execute arbitrary PHP commands and carry out local file include and cross-site scripting attacks. ATutor 1.5.1-pl1 and pri...

ATutor 1.4.3 content.php cid Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/13972/info ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...

ATutor 1.5.x users/browse.php cat Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/18857/info ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...

acontent 1.1 - Multiple Vulnerabilities

No description provided by source. AContent 1.1 Multiple SQL Injection Vulnerabilities Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 1.1 build r296 Summary: AContent is an open source learning content authoring system and respository used to...

ATutor 1.5.1 Password_Reminder.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14831/info ATutor is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resul...

CVE-2014-2091

Cross-site scripting XSS vulnerability in mods/standard/forums/admin/forumadd.php in ATutor 2.1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the title parameter in an addforum action. NOTE: the original disclosure also reported issues that may not cross...

CVE-2014-2091

Cross-site scripting XSS vulnerability in mods/standard/forums/admin/forumadd.php in ATutor 2.1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the title parameter in an addforum action. NOTE: the original disclosure also reported issues that may not cross...

Cross site scripting

Cross-site scripting XSS vulnerability in mods/standard/forums/admin/forumadd.php in ATutor 2.1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the title parameter in an addforum action. NOTE: the original disclosure also reported issues that may not cross...

CVE-2014-2091

Cross-site scripting XSS vulnerability in mods/standard/forums/admin/forumadd.php in ATutor 2.1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the title parameter in an addforum action. NOTE: the original disclosure also reported issues that may not cross...

CVE-2014-2091

ATutor 2.1.1 is affected by CVE-2014-2091: a cross-site scripting (XSS) vulnerability in mods/_standard/forums/admin/forum_add.php that allows remote authenticated administrators to inject arbitrary script/HTML via the title parameter in an add_forum action. The issue is exploitable by those with...

ATutor 2.1.1 Cross Site Scripting

============================================================== Title ...| ATutor Multiple vulnerabilities Version .| ATutor-2.1.1 Date ....| 19.02.2014 Found ...| HauntIT Blog Home ....| https://atutor.ca ==============================================================...

ATutor - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

ATutor - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/65744/info ATutor is prone to multiple cross-site scripting vulnerabilities and a HTML-injection vulnerability. Successful exploits will allow attacker-supplied HTML and script code to...

ATutor - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/65744/info ATutor is prone to multiple cross-site scripting vulnerabilities and a HTML-injection vulnerability. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the...

Atutor AContent Local File Inclusion Vulnerability

Atutor AContent is prone to local file inclusion vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-6528

Multiple cross-site scripting XSS vulnerabilities in ATutor before 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 themes/default/tilesearch/index.tmpl.php, 2 login.php, 3 search.php, 4 passwordreminder.php, 5 login.php/jscripts/infusion, 6...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ATutor before 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 themes/default/tilesearch/index.tmpl.php, 2 login.php, 3 search.php, 4 passwordreminder.php, 5 login.php/jscripts/infusion, 6...

CVE-2012-6528

Multiple cross-site scripting XSS vulnerabilities in ATutor before 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 themes/default/tilesearch/index.tmpl.php, 2 login.php, 3 search.php, 4 passwordreminder.php, 5 login.php/jscripts/infusion, 6...

CVE-2012-6528

ATutor before 2.1 contains multiple cross-site scripting (XSS) vulnerabilities exploitable via PATH_INFO in several endpoints (themes/default/tile_search/index.tmpl.php, login.php, search.php, password_reminder.php, login.php/jscripts/infusion, login.php/mods/_standard/flowplayer, browse.php/jscr...

ATutor 2.1 - tool_file Local File Inclusion

ATutor 2.1 - toolfile Local File Inclusion source: https://www.securityfocus.com/bid/56600/info ATutor is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts i...