597 matches found
ATutor <= 2.0.2 Upload File Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
XSS vulnerability in ATutor
Vulnerability ID: HTB22600 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinatutor1.html Product: ATutor Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not...
XSS vulnerability in Atutor edit content folder
Vulnerability ID: HTB22599 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinatutoreditcontentfolder.html Product: ATutor Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010 Vulnerability Type: XSS Cross Site Scripting...
ATutor 1.0 Cross Site Scripting
====================================== Vulnerability ID: HTB22599 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinatutoreditcontentfolder.html Product: ATutor Vendor: Inclusive Design Institute http://www.atutor.ca/ Vulnerable Version: 1.0 Vendor Notification: 01 September 2010...
ATutor 1.0 - Multiple 'cid' Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/43241/info ATutor is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...
ATutor 1.0 - Multiple cid Cross-Site Scripting Vulnerabilities
ATutor 1.0 - Multiple cid Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/43241/info ATutor is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to execute arbitrary HTML and script code in the browser of an unsuspecting...
Cross-site Scripting (XSS) Vulnerabilities in ATutor
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ATutor which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in ATutor The vulnerability exists due to input sanitation error in the "cid" parameter in...
ATutor 2.0 Cross Site Request Forgery
input type="submit" name="submit" value="Sav...
CVE-2010-0971
Multiple cross-site scripting XSS vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor privileges, to inject arbitrary web script or HTML via the 1 Question and 2 Choice fields in tools/polls/add.php, the 3 Type and 4 Title fields in tools/groups/createmanual.php, and...
CVE-2010-0971
CVE-2010-0971 concerns multiple XSS flaws in ATutor 1.6.4. The affected components are the polls, groups, and assignments modules: injecting scripts via (1) Question and (2) Choice in tools/polls/add.php, (3) Type and (4) Title in tools/groups/create_manual.php, and (5) Title in assignments/add_a...
CVE-2010-0971
Multiple cross-site scripting XSS vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor privileges, to inject arbitrary web script or HTML via the 1 Question and 2 Choice fields in tools/polls/add.php, the 3 Type and 4 Title fields in tools/groups/createmanual.php, and...
ATutor 1.6.4 Cross Site Scripting
Dear Sir / Madam The Itsecteam has discovered 3 new bugs in ATutor 1.6.4 CMS and will be glad to report and public them . more information about these bugs are listed below : Topic : ATutor 1.6.4 Bugs Type : Cross Site Scripting all of them Credit : ItSecTeam Remote : Yes Status : Bug mail :...
ATutor 1.6.4 - Multiple Cross-Site Scripting Vulnerabilities
ATutor 1.6.4 - Multiple Cross-Site Scripting Vulnerabilities Topic : ATutor 1.6.4 Bugs Type : Cross Site Scripting all of them Credit : ItSecTeam Remote : Yes Status : Bug mail : [email protected] Dork : "ATutor 1.6.4" Special Tnx : am!rkh@n, Amin ShokohiPejvak, C0M0D0, 0xd41684c654, r3dmove And...
ATutor 1.6.4 Multiple Cross Site Scripting Vulnerability
Exploit for unknown platform in category web applications ======================================================== ATutor 1.6.4 Multiple Cross Site Scripting Vulnerability ======================================================== Topic : ATutor 1.6.4 Bugs Type : Cross Site Scripting all of them...
ATutor 1.6.4 - Multiple Cross-Site Scripting Vulnerabilities
Topic : ATutor 1.6.4 Bugs Type : Cross Site Scripting all of them Credit : ItSecTeam Remote : Yes Status : Bug mail : [email protected] Dork : "ATutor 1.6.4" Special Tnx : am!rkh@n, Amin ShokohiPejvak, C0M0D0, 0xd41684c654, r3dmove And All It Security Team Members Website : WwW.ITSecTeam.com...
CVE-2008-3368
PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter...
CVE-2008-3368
PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter...
CVE-2008-3368
ATutor 1.6.1 pl1 and earlier is affected by CVE-2008-3368 due to a PHP remote file inclusion vulnerability in tools/packages/import.php, enabling remote authenticated administrators to execute arbitrary PHP code via a URL passed in the type parameter. The issue arises from improper handling of th...
ATutor <= 1.6.1-pl1 (import.php) Remote File Inclusion Vulnerability
No description provided by source. ATutor Course Server Rfi AUTHOR : IRCRASH R3d.W0rm Discovered by : IRCRASH R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Script Download : www.atutor.ca DORK : "Web site engine's code is copyright 2001-2007 ATutor" Note : You...