PT-2012-5979

Name of the Vulnerable Software and Affected Versions ATutor AContent versions 1.2-1 Description The issue is related to improper access restriction in the user/index inline editor submit.php file, allowing remote authenticated users to modify arbitrary user passwords via a crafted request. This...

PT-2012-5816

Name of the Vulnerable Software and Affected Versions ATutor AContent versions prior to 1.2-1 Description The issue allows remote attackers to modify arbitrary user passwords or category names. This can be achieved by sending a direct request to specific API endpoints, such as "user/index inline...

PT-2012-5978

Name of the Vulnerable Software and Affected Versions ATutor AContent versions 1.2-1 Description A SQL injection issue exists, allowing remote authenticated users to execute arbitrary SQL commands via the field parameter in the user/index inline editor submit.php file. This issue is a result of a...