CVE-2010-0971

CVE-2010-0971 concerns multiple XSS flaws in ATutor 1.6.4. The affected components are the polls, groups, and assignments modules: injecting scripts via (1) Question and (2) Choice in tools/polls/add.php, (3) Type and (4) Title in tools/groups/create_manual.php, and (5) Title in assignments/add_a...

CVE-2010-0971

Multiple cross-site scripting XSS vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor privileges, to inject arbitrary web script or HTML via the 1 Question and 2 Choice fields in tools/polls/add.php, the 3 Type and 4 Title fields in tools/groups/createmanual.php, and...

CVE-2010-0971: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor privileges, to inject arbitrary web script or HTML via the 1 Question and 2 Choice fields in tools/polls/add.php, the 3 Type and 4 Title fields in tools/groups/createmanual.php, and...

ATutor 1.6.4 - Multiple Cross-Site Scripting Vulnerabilities

ATutor 1.6.4 - Multiple Cross-Site Scripting Vulnerabilities Topic : ATutor 1.6.4 Bugs Type : Cross Site Scripting all of them Credit : ItSecTeam Remote : Yes Status : Bug mail : [email protected] Dork : "ATutor 1.6.4" Special Tnx : am!rkh@n, Amin ShokohiPejvak, C0M0D0, 0xd41684c654, r3dmove And...

ATutor 1.6.4 Multiple Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ======================================================== ATutor 1.6.4 Multiple Cross Site Scripting Vulnerability ======================================================== Topic : ATutor 1.6.4 Bugs Type : Cross Site Scripting all of them...

ATutor 1.6.4 Cross Site Scripting

Dear Sir / Madam The Itsecteam has discovered 3 new bugs in ATutor 1.6.4 CMS and will be glad to report and public them . more information about these bugs are listed below : Topic : ATutor 1.6.4 Bugs Type : Cross Site Scripting all of them Credit : ItSecTeam Remote : Yes Status : Bug mail :...

ATutor 1.6.4 - Multiple Cross-Site Scripting Vulnerabilities

Topic : ATutor 1.6.4 Bugs Type : Cross Site Scripting all of them Credit : ItSecTeam Remote : Yes Status : Bug mail : [email protected] Dork : "ATutor 1.6.4" Special Tnx : am!rkh@n, Amin ShokohiPejvak, C0M0D0, 0xd41684c654, r3dmove And All It Security Team Members Website : WwW.ITSecTeam.com...

CVE-2008-3368

PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter...

CVE-2008-3368

PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter...

CVE-2008-3368

ATutor 1.6.1 pl1 and earlier is affected by CVE-2008-3368 due to a PHP remote file inclusion vulnerability in tools/packages/import.php, enabling remote authenticated administrators to execute arbitrary PHP code via a URL passed in the type parameter. The issue arises from improper handling of th...

CVE-2008-3368: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter...

ATutor <= 1.6.1-pl1 (import.php) Remote File Inclusion Vulnerability

No description provided by source. ATutor Course Server Rfi AUTHOR : IRCRASH R3d.W0rm Discovered by : IRCRASH R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Script Download : www.atutor.ca DORK : "Web site engine's code is copyright 2001-2007 ATutor" Note : You...

ATutor 1.6.1-pl1 - import.php Remote File Inclusion

ATutor 1.6.1-pl1 - import.php Remote File Inclusion ATutor Course Server Rfi AUTHOR : IRCRASH R3d.W0rm Discovered by : IRCRASH R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Script Download : www.atutor.ca DORK : "Web site engine's code is copyright © 2001-2007...

ATutor <= 1.6.1-pl1 (import.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================================== ATutor = 1.6.1-pl1 import.php Remote File Inclusion Vulnerability ==================================================================== ATutor Course Server Rfi AUTHOR :...

ATutor 1.6.1-pl1 - 'import.php' Remote File Inclusion

ATutor Course Server Rfi AUTHOR : IRCRASH R3d.W0rm Discovered by : IRCRASH R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Script Download : www.atutor.ca DORK : "Web site engine's code is copyright © 2001-2007 ATutor®" Note : You must login , then use rfi bug ...

ACollab SQL injection vulnerability

Overview ACollab is open source web-based groupware and is also available as an add-on for e-learning content management system ATutor. ACollab contains a SQL injection vulnerability. Impact A remote attacker could modify the database contents or steal data. An attacker could also bypass...

ATutor cross-site scripting vulnerability

Overview ATutor, an open source e-learning content management system, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Authentication information could be stolen as a result. Solution None...

atutor155-xss.txt

====================================================================== ATutor Impact: Cross Site Scripting Status: patch available ------------------------------ Affected software description: ------------------------------ Application: ATutor Version: = 1.5.5 Vendor: http://www.atutor.ca...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 attributes such as style and onmouseover in a forum post or b mail; or 2 the website field of the profile...