Unscored CVE-2006-3821 EUVD-2006-3815GHSA-gmmj-x4h7-2cqh

Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (…

Published Jul 25, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in (a) index_list.php and (2) year, (3) month, and (4) day parameter in (b) registration.php.

References

28187 vdb-entry
atutor-registration-xss(27619) vdb-entry
20060711 Re: ATutor 1.5.3 Cross Site Scripting mailing-list
20060708 ATutor 1.5.3 Cross Site Scripting mailing-list
21008 third-party-advisory
28186 vdb-entry