CVE-2016-2555

Description

References

• sourceincite.com/research/src-2016-08 · Exploit
• rapid7.com/db/modules/exploit/multi/http/atutor_sqli · Third Party Advisory
• atutor/ATutor commit 629b2c9 · Patch
• atutor/ATutor commit 945a9dc · Patch
• exploit-db.com/exploits/39514

atutor 的其他漏洞

• CVE-2023-27008中危 6.1A Cross-site scripting (XSS) vulnerability in the function encrypt_password() in login.tmpl.php in ATutor 2.2.1 allows remote attackers to i…
• CVE-2021-43498高危 7.5An Access Control vulnerability exists in ATutor 2.2.4 in password_reminder.php when the g, id, h, form_password_hidden, and form_change HTT…
• CVE-2020-23341中危 6.1A reflected cross site scripting (XSS) vulnerability in the /header.tmpl.php component of ATutor 2.2.4 allows attackers to execute arbitrary…
• CVE-2015-1583高危 8.8Multiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrato…
• CVE-2014-9753严重 9.8confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing user via the auto_logi…