CVE-2005-3403

MEDIUM 4.3CVE-2005-3403 · Published 01/11/2005 · updated 16/06/2026

In short

CVE-2005-3403 is a MEDIUM (CVSS 4.3) vulnerability affecting atutor (adaptive technology resource centre).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
atutor adaptive_technology_resource_centre	`= 1.4.1= 1.4.2= 1.4.3= 1.5.1= 1.5.1_pl1`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to inject arbitrary web script or HTML via (1) the _base_href parameter in translate.php, (2) the _base_path parameter in news.inc.php, and (3) the p parameter in add_note.php.

References

atutor.ca/view/3/6158/1.html
marc.info
secunia.com/advisories/16915 · Patch
secunia.com/secunia_research/2005-55/advisory · Patch
securityreason.com/securityalert/123
securitytracker.com/id
osvdb.org/20347 · Patch
osvdb.org/20348 · Patch
osvdb.org/20349 · Patch
securityfocus.com/bid/15221 · Exploit
vupen.com/english/advisories/2005/2228

More vulnerabilities in atutor

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

atutor

adaptive_technology_resource_centre

= 1.4.1= 1.4.2= 1.4.3= 1.5.1= 1.5.1_pl1

No fix yet

More vulnerabilities in atutor

See all →