CVE-2015-1583

Mô tả

Tham khảo

• packetstormsecurity.com/files/130598/ATutor-LCMS-2.2-Cross-Site-Request-Forgery.html · Exploit
• securityfocus.com/bid/72845 · Third Party Advisory
• edricteo.com/cve-2015-1583-atutor-lcms-csrf-vulnerability · Exploit
• atutor/ATutor commit 068b8aa · Patch
• atutor/ATutor commit 0ee8273 · Patch
• atutor/ATutor commit af519cf · Patch

Lỗ hổng khác của atutor

• CVE-2023-27008TRUNG BÌNH 6.1A Cross-site scripting (XSS) vulnerability in the function encrypt_password() in login.tmpl.php in ATutor 2.2.1 allows remote attackers to i…
• CVE-2021-43498CAO 7.5An Access Control vulnerability exists in ATutor 2.2.4 in password_reminder.php when the g, id, h, form_password_hidden, and form_change HTT…
• CVE-2020-23341TRUNG BÌNH 6.1A reflected cross site scripting (XSS) vulnerability in the /header.tmpl.php component of ATutor 2.2.4 allows attackers to execute arbitrary…
• CVE-2014-9753NGHIÊM TRỌNG 9.8confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing user via the auto_logi…
• CVE-2019-16114NGHIÊM TRỌNG 9.8In ATutor 2.2.4, an unauthenticated attacker can change the application settings and force it to use his crafted database, which allows him …