CVE-2005-2649

Опубликовано: 23 авг. 2005

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML via (1) course parameter in login.php or (2) words parameter in search.php.

Ссылки

http://secunia.com/advisories/16496
Exploit
Vendor Advisory
http://www.securityfocus.com/archive/1/408521
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/14598
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/21910
http://secunia.com/advisories/16496
Exploit
Vendor Advisory
http://www.securityfocus.com/archive/1/408521
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/14598
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/21910

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.03579

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-pf3c-g88w-q955

github

больше 4 лет назад