PT-2012-5816

Name of the Vulnerable Software and Affected Versions ATutor AContent versions prior to 1.2-1 Description The issue allows remote attackers to modify arbitrary user passwords or category names. This can be achieved by sending a direct request to specific API endpoints, such as "user/index inline...