CVE-2006-3484: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the 1 showcourses or 2 currentcat parameters to a admin/createcourse.php, showcourses parameter to b users/createcourse.php, 3 p parameter to c...