Academic Web Tools Security Vulnerabilities and Issues — Academic Web Tools CVE List

Lucene search

YektawebAcademic Web Tools

2 matches found

CVE•added 2008/07/02 5:14 p.m.•30 views

CVE-2008-2968

SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the book_id parameter.

7.5CVSS8.4AI score0.00823EPSS

CVE•added 2008/07/02 5:14 p.m.•30 views

CVE-2008-2970

Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to hijack web sessions by setting the PHPSESSID parameter to (1) index.php and (2) login.php in homepg/.

7.5CVSS6.9AI score0.01443EPSS

Web