CVE-2014-9753

概要

参考情報

• karmainsecurity.com/KIS-2015-06 · Exploit
• seclists.org/fulldisclosure/2015/Nov/11 · Exploit
• update.atutor.ca/patch/2_2/2_2-6/patch.xml · Broken Link
• securityfocus.com/archive/1/archive/1/536835/100/0/threaded · Broken Link
• atutor/ATutor commit 950a029 · Patch

atutor のその他の脆弱性

• CVE-2023-27008中 6.1A Cross-site scripting (XSS) vulnerability in the function encrypt_password() in login.tmpl.php in ATutor 2.2.1 allows remote attackers to i…
• CVE-2021-43498高 7.5An Access Control vulnerability exists in ATutor 2.2.4 in password_reminder.php when the g, id, h, form_password_hidden, and form_change HTT…
• CVE-2020-23341中 6.1A reflected cross site scripting (XSS) vulnerability in the /header.tmpl.php component of ATutor 2.2.4 allows attackers to execute arbitrary…
• CVE-2015-1583高 8.8Multiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrato…
• CVE-2019-16114緊急 9.8In ATutor 2.2.4, an unauthenticated attacker can change the application settings and force it to use his crafted database, which allows him …