Atutor

Atutor

44 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2011-3706

Exploit
  • EPSS 1.34%
  • Veröffentlicht 23.09.2011 23:55:02
  • Zuletzt bearbeitet 16.06.2026 23:33:46

ATutor 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by users/tool_settings.inc.php and certain other files.

2.1

CVE-2010-0971

Exploit
  • EPSS 1.67%
  • Veröffentlicht 16.03.2010 19:00:00
  • Zuletzt bearbeitet 16.06.2026 23:17:14

Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor privileges, to inject arbitrary web script or HTML via the (1) Question and (2) Choice fields in tools/polls/add.php, the (3) Type a...

6.5

CVE-2008-3368

  • EPSS 2.65%
  • Veröffentlicht 30.07.2008 17:41:00
  • Zuletzt bearbeitet 16.06.2026 22:55:41

PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter.

4.3

CVE-2008-0828

  • EPSS 1.03%
  • Veröffentlicht 19.02.2008 21:44:00
  • Zuletzt bearbeitet 16.06.2026 22:50:26

Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) attributes such as style and onmouseover in (a) forum post or (b) mail; or (2) the website field of ...