ATutor <= 2.2.4 Multiple Vulnerabilities

Atutor is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-43498

CVE-2021-43498 affects ATutor 2.2.4 in password_reminder.php. The vulnerability is an access-control issue triggered when the POST parameters g, id, h, form_password_hidden, and form_change are set. Documentation consistently describes an unauthorized access condition but does not provide exploit...