CVE-2020-23341

Description

References

• minhtuanact.github.io/post/reflected-xss-in-atutor-2.2.4 · Exploit

Weitere Schwachstellen in atutor

• CVE-2023-27008MITTEL 6.1A Cross-site scripting (XSS) vulnerability in the function encrypt_password() in login.tmpl.php in ATutor 2.2.1 allows remote attackers to i…
• CVE-2021-43498HOCH 7.5An Access Control vulnerability exists in ATutor 2.2.4 in password_reminder.php when the g, id, h, form_password_hidden, and form_change HTT…
• CVE-2015-1583HOCH 8.8Multiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrato…
• CVE-2014-9753KRITISCH 9.8confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing user via the auto_logi…
• CVE-2019-16114KRITISCH 9.8In ATutor 2.2.4, an unauthenticated attacker can change the application settings and force it to use his crafted database, which allows him …