TI-2020-08473 CVE-2020-10557 · GHSA-cc94-3mp7-qx27
An issue was discovered in AContent through 1.4.
Priority MEDIUM 41
An issue was discovered in AContent through 1.4.
ATutor
Records55All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9
Exploited now
ATutor records in CISA KEVNo ATutor vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Acontent · all components
TI-2012-04356 CVE-2012-5167 · GHSA-mhp3-2x76-g9v9
Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote…
Priority MEDIUM 40
Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to execute arbitrary SQL commands via the (1) field parameter to course_category/index_inline_editor_submit.php or (2) user/in…
TI-2012-04357 CVE-2012-5168 · GHSA-7q6v-9564-57r5
ATutor AContent before 1.2-1 allows remote attackers to modify arbitrary user passwords…
Priority LOW 39
ATutor AContent before 1.2-1 allows remote attackers to modify arbitrary user passwords or category names via a direct request to (1) user/index_inline_editor_submit.php or (2) course_category/index_inline_editor_submit.…
TI-2012-04581 CVE-2012-5453 · GHSA-5h63-hhgp-qw4g
SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent…
Priority LOW 34
SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated users to execute arbitrary SQL commands via the field parameter.
TI-2012-04582 CVE-2012-5454 · GHSA-2976-6mfc-xmp6
user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict…
Priority LOW 33
user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access, which allows remote authenticated users to modify arbitrary user passwords via a crafted request.
TI-2012-04358 CVE-2012-5169 · GHSA-ffxp-qpqp-3m38
Multiple cross-site scripting (XSS) vulnerabilities in file_manager/preview_top.php in…
Priority LOW 24
Multiple cross-site scripting (XSS) vulnerabilities in file_manager/preview_top.php in ATutor AContent before 1.2-2 allow remote attackers to inject arbitrary web script or HTML via the (1) pathext, (2) popup, (3) framed…