CVEvulnerability
CVE-2005-2649
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-08-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML via (1) course parameter in login.php or (2) words parameter in search.php.
Affected configurations
• adaptive technology resource centre atutor 1.5.1
References
- http://secunia.com/advisories/16496 Exploit, Vendor Advisory
- http://www.securityfocus.com/archive/1/408521 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/14598 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21910 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/16496 Exploit, Vendor Advisory
- http://www.securityfocus.com/archive/1/408521 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/14598 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21910 exchange.xforce.ibmcloud.com