Description
Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) show_courses or (2) current_cat parameters to (a) admin/create_course.php, show_courses parameter to (b) users/create_course.php, (3) p parameter to (c) documentation/admin/, (4) forgot parameter to (d) password_reminder.php, (5) cat parameter to (e) users/browse.php, or the (6) submit parameter to admin/fix_content.php.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 5
- ATutor 1.5.x - 'create_course.php' Multiple Cross-Site Scripting Vulnerabilities EDB-28176 · webapps · Jul 6, 2006 · verified
- ATutor 1.5.x - '/documentation/admin/index.php' Cross-Site Scripting EDB-28177 · webapps · Jul 6, 2006 · verified
- ATutor 1.5.x - 'password_reminder.php?forgot' Cross-Site Scripting EDB-28178 · webapps · Jul 6, 2006 · verified
- ATutor 1.5.x - '/users/browse.php?cat' Cross-Site Scripting EDB-28179 · webapps · Jul 6, 2006 · verified
- ATutor 1.5.x - '/admin/fix_content.php?submit' Cross-Site Scripting EDB-28180 · webapps · Jul 6, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- ADV-2006-2691 vdb-entry
- 27021 vdb-entry
- http://www.atutor.ca/view/3/8341/1.html
- 20941 third-party-advisory
- 27020 vdb-entry
- 27023 vdb-entry
- 27022 vdb-entry
- 18857 vdb-entry
- 27019 vdb-entry