CVEvulnerability
CVE-2010-0971
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2010-03-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:N/AC:H/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor privileges, to inject arbitrary web script or HTML via the (1) Question and (2) Choice fields in tools/polls/add.php, the (3) Type and (4) Title fields in tools/groups/create_manual.php, and the (5) Title field in assignments/add_assignment.php. NOTE: some of these details are obtained from third party information.
Affected configurations
• atutor atutor 1.6.4
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/62904 osvdb.org
- http://osvdb.org/62905 osvdb.org
- http://osvdb.org/62906 osvdb.org
- http://packetstormsecurity.org/1003-exploits/atutor-xss.txt Exploit
- http://secunia.com/advisories/38906 Vendor Advisory
- http://www.exploit-db.com/exploits/11685 Exploit
- http://www.securityfocus.com/bid/38656 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56852 exchange.xforce.ibmcloud.com
- http://osvdb.org/62904 osvdb.org
- http://osvdb.org/62905 osvdb.org
- http://osvdb.org/62906 osvdb.org
- http://packetstormsecurity.org/1003-exploits/atutor-xss.txt Exploit
- http://secunia.com/advisories/38906 Vendor Advisory
- http://www.exploit-db.com/exploits/11685 Exploit
- http://www.securityfocus.com/bid/38656 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56852 exchange.xforce.ibmcloud.com