ATutor Path Traversal Vulnerability

ATutor is an open source Web-based learning content management system LCMS developed by the ATutor team. The system includes teaching content management, forums, chat rooms and other modules. A directory traversal vulnerability exists in versions of ATutor prior to 2.2.2. An attacker can exploit...

CVE-2006-3484: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the 1 showcourses or 2 currentcat parameters to a admin/createcourse.php, showcourses parameter to b users/createcourse.php, 3 p parameter to c...