atutor155-xss.txt

====================================================================== ATutor Impact: Cross Site Scripting Status: patch available ------------------------------ Affected software description: ------------------------------ Application: ATutor Version: = 1.5.5 Vendor: http://www.atutor.ca...

CVE-2008-0828

Multiple cross-site scripting XSS vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 attributes such as style and onmouseover in a forum post or b mail; or 2 the website field of the profile...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 attributes such as style and onmouseover in a forum post or b mail; or 2 the website field of the profile...

CVE-2008-0828

Multiple cross-site scripting XSS vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 attributes such as style and onmouseover in a forum post or b mail; or 2 the website field of the profile...

CVE-2008-0828

ATutor 1.5.5 and earlier contains multiple cross-site scripting (XSS) vulnerabilities. An attacker can inject arbitrary web script or HTML via (1) attributes such as style and onmouseover in forum posts or mail, or (2) the website field in user profiles. The CVE entry covers these XSS flaws; expl...

CVE-2007-0381

Multiple SQL injection vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters. NOTE: CVE analysis suggests that the vendor fixed these issues...

Sql injection

Multiple SQL injection vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters. NOTE: CVE analysis suggests that the vendor fixed these issues...

CVE-2007-0381

Multiple SQL injection vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters. NOTE: CVE analysis suggests that the vendor fixed these issues...

CVE-2007-0381

ATutor 1.5.3.2 contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via unspecified parameters. The underlying issue is not detailed in the provided documents beyond the vendor-fixed note; no exploitation details are given. The CVE entry in...

ATutor多个SQL注入漏洞

ATutor是一款基于PHP的WEB应用程序。 ATutor不正确处理用户提交的WEB数据，远程攻击者可以利用漏洞进行SQL注入获得敏感信息。 问题存在于'index.php'脚本中，由于对用户提交的URI参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 ATutor ATutor 1.5.3 ATutor ATutor 1.5.3 ATutor ATutor 1.5.1 pl2 ATutor ATutor 1.5.1 pl1 ATutor ATutor 1.5.1 ATutor ATutor 1.4.3 ATutor ATutor 1.4.2...

CVE-2006-5734

Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 section parameter in a documentation/common/frametoc.php and b documentation/common/search.php, the 2 reqlang parameter in documentation/common/search.php a...

CVE-2006-5734

The CVE-2006-5734 entry describes multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2, exploitable via untrusted URLs passed to specific parameters (1) section in documentation/common/frame_toc.php and documentation/common/search.php; (2) req_lang in documentation/common/search.p...

CVE-2006-5734

Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 section parameter in a documentation/common/frametoc.php and b documentation/common/search.php, the 2 reqlang parameter in documentation/common/search.php a...

PT-2006-6422 · Atutor · Atutor

Name of the Vulnerable Software and Affected Versions: ATutor version 1.5.3.2 Description: The issue allows remote attackers to execute arbitrary PHP code. This can be achieved via several parameters in different PHP files, including the section parameter in "documentation/common/frame toc.php" a...

ATutor1.5.3.2.txt

====================================================================== Atutor ====================================================================== Info:- Download: http://prdownloads.sourceforge.net/atutor/ATutor-1.5.3.2.tar.gz?download Version : ATutor 1.5.3.2...

ATutor 1.5.3 - Multiple Remote File Inclusions

ATutor 1.5.3 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/20634/info ATutor is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitra...

ATutor 1.5.3 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/20634/info ATutor is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...

atutor1531.txt

!/usr/bin/php -q -d shortopentag=on = 4.1 allowing SELECT subqueries for ORDER BY statements see http://dev.mysql.com/doc/refman/5.0/en/subqueries.html - with at least 2 links in atlinks table / if $argc5 echo "Usage: php ".$argv0." host path user pass OPTIONS\r\n"; echo "host: target server...

CVE-2006-3996

SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the 1 desc or 2 asc parameters...

CVE-2006-3996

CVE-2006-3996 affects ATutor 1.5.3.1 and earlier in the file links/index.php. The vulnerability is an SQL injection in the desc and asc parameters, allowing remote authenticated users to execute arbitrary SQL commands. The NVD records a CVSS v2 base score of 6.5 (MEDIUM) with network attack vecto...