Description
ATutor AContent before 1.2-1 allows remote attackers to modify arbitrary user passwords or category names via a direct request to (1) user/index_inline_editor_submit.php or (2) course_category/index_inline_editor_submit.php.
References
- 51014 third-party-advisory
- 86428 vdb-entry
- 56100 vdb-entry
- 20121017 Multiple vulnerabilities in AContent mailing-list
- http://update.atutor.ca/acontent/patch/1_2/
- acontent-pwd-field-security-bypass(79461) vdb-entry
- acontent-indexinlineeditorsubmit-sec-bypass(79462) vdb-entry
- 51034 third-party-advisory
- https://www.htbridge.com/advisory/HTB23117