CVE-2012-6528

MEDIUM 4.3CVE-2012-6528 · Published 31/01/2013 · updated 16/06/2026

In short

CVE-2012-6528 is a MEDIUM (CVSS 4.3) vulnerability affecting atutor (atutor).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
atutor atutor	`= 1.0= 1.2.1= 1.2.2= 1.3= 1.3.1= 1.3.2= 1.3.3= 1.4= 1.4.1= 1.4.2= 1.4.3= 1.5.1= 1.5.2= 1.5.3= 1.5.3.1= 1.5.3.2= 1.5.4= 1.5.5= 1.6= 1.6.1= 1.6.4= 2.0.1= 2.0.2= 2.0.3≤ 2.0`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) themes/default/tile_search/index.tmpl.php, (2) login.php, (3) search.php, (4) password_reminder.php, (5) login.php/jscripts/infusion, (6) login.php/mods/_standard/flowplayer, (7) browse.php/jscripts/infusion/framework/fss, (8) registration.php/themes/default/ie_styles.css, (9) about.php, or (10) themes/default/social/basic_profile.tmpl.php.

References

archives.neohapsis.com/archives/bugtraq/2012-01/0094.html · Exploit
atutor.ca/atutor/change_log.php
secunia.com/advisories/47597 · Vendor Advisory
darksecurity.de/advisories/2012/SSCHADV2012-002.txt · Exploit
securityfocus.com/bid/51423 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/72412

More vulnerabilities in atutor

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

atutor

= 1.0= 1.2.1= 1.2.2= 1.3= 1.3.1= 1.3.2= 1.3.3= 1.4= 1.4.1= 1.4.2= 1.4.3= 1.5.1= 1.5.2= 1.5.3= 1.5.3.1= 1.5.3.2= 1.5.4= 1.5.5= 1.6= 1.6.1= 1.6.4= 2.0.1= 2.0.2= 2.0.3≤ 2.0

No fix yet

Description

More vulnerabilities in atutor

See all →