GCVE - cpe:2.3:a:atutor:atutor:1.5.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:atutor:atutor:1.5.3:*:*:*:*:*:*:*

part: a version: 1.5.3 update: *

Vendor	Atutor (`69bf6287-fa98-5b8e-aa4b-51a5abfbd635`)
Product	Atutor (`566e6236-9603-5339-af6e-7528a1178bf0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/atutor/atutor`	purl2cpe	2026-06-01 10:16:02.928419
`pkg:sourceforge/atutor`	purl2cpe	2026-06-01 10:16:02.928420

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-6528`	vulnerable	2026-06-08 05:03:00.648698	Details available Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) themes/default/tile_search/index.tmpl.php, (2) login.php, (3) search.php, (4) password_reminder.php, (5) login.php/jscripts/infusion, (6) login.php/mods/_standard/flowplayer, (7) browse.php/jscripts/infusion/framework/fss, (8) registration.php/themes/default/ie_styles.css, (9) about.php, or (10) themes/default/social/basic_profile.tmpl.php. Published: 2013-01-31T02:00:00.000Z Updated: 2024-08-06T21:28:39.815Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/51423 https://exchange.xforce.ibmcloud.com/vulnerabilities/72412 http://archives.neohapsis.com/archives/bugtraq/2012-01/0094.html http://atutor.ca/atutor/change_log.php http://www.darksecurity.de/advisories/2012/SSCHADV2012-002.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3368`	vulnerable	2026-06-08 04:50:34.400280	Details available PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter. Published: 2008-07-30T17:00:00.000Z Updated: 2024-08-07T09:37:26.704Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/2206/references http://securityreason.com/securityalert/4064 https://exchange.xforce.ibmcloud.com/vulnerabilities/44051 http://www.securityfocus.com/bid/30412 http://secunia.com/advisories/31274	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0828`	vulnerable	2026-06-08 04:50:17.882829	Details available Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) attributes such as style and onmouseover in (a) forum post or (b) mail; or (2) the website field of the profile. Published: 2008-02-19T21:00:00.000Z Updated: 2024-08-07T08:01:39.781Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/488293/100/0/threaded http://secunia.com/advisories/29015 http://www.securityfocus.com/bid/27855 http://securityreason.com/securityalert/3670	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.