Approved changes feed: RSS · Atom
cpe:2.3:a:atutor:atutor:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Atutor (69bf6287-fa98-5b8e-aa4b-51a5abfbd635) |
|---|---|
| Product | Atutor (566e6236-9603-5339-af6e-7528a1178bf0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/atutor/atutor |
purl2cpe | 2026-06-01 10:16:02.928355 |
pkg:sourceforge/atutor |
purl2cpe | 2026-06-01 10:16:02.928358 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6956 |
vulnerable | 2026-06-08 08:07:05.201461 |
Reflected XSS in ATutor
ATutor is vulnerable to Reflected XSS in /install/install.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser.
Product is no longer actively supported. Maintainers of this project were notified early about this vulnerability, but did not respond with the details of the vulnerability or vulnerable version range. Only version 2.2.4 was tested and confirmed as vulnerable, other versions were not tested but might also be vulnerable.
Published: 2026-05-11T09:40:36.558Z
Updated: 2026-05-11T12:40:01.775Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6909 |
vulnerable | 2026-06-08 08:07:05.172007 |
Reflected XSS in ATutor
ATutor is vulnerable to Reflected XSS in /install/upgrade.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser.
Product is no longer actively supported. Maintainers of this project were notified early about this vulnerability, but did not respond with the details of the vulnerability or vulnerable version range. Only version 2.2.4 was tested and confirmed as vulnerable, other versions were not tested but might also be vulnerable.
Published: 2026-05-11T09:40:25.617Z
Updated: 2026-05-11T12:40:53.909Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-37147 |
vulnerable | 2026-06-08 05:25:50.244638 |
ATutor 2.2.4 - 'id' SQL Injection
HIGH (7.1)
ATutor 2.2.4 contains a SQL injection vulnerability in the admin user deletion page that allows authenticated attackers to manipulate database queries through the 'id' parameter. Attackers can exploit the vulnerability by injecting malicious SQL code into the 'id' parameter of the admin_delete.php script to potentially extract or modify database information.
Published: 2026-02-06T23:14:08.356Z
Updated: 2026-03-05T01:28:14.408Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23341 |
vulnerable | 2026-06-08 05:22:31.886494 |
Details available
A reflected cross site scripting (XSS) vulnerability in the /header.tmpl.php component of ATutor 2.2.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Published: 2021-08-17T21:45:59.000Z
Updated: 2024-08-04T14:58:15.126Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7172 |
vulnerable | 2026-06-08 05:14:13.998740 |
Details available
A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Real Name field to /mods/_core/users/admins/my_edit.php.
Published: 2019-01-29T18:00:00.000Z
Updated: 2024-09-17T01:12:11.435Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16114 |
vulnerable | 2026-06-08 05:13:07.748100 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12170 |
vulnerable | 2026-06-08 05:12:38.633353 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12169 |
vulnerable | 2026-06-08 05:12:38.633009 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11446 |
vulnerable | 2026-06-08 05:12:37.160974 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6483 |
vulnerable | 2026-06-08 05:09:51.435862 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14981 |
vulnerable | 2026-06-08 05:08:57.696223 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000004 |
vulnerable | 2026-06-08 05:08:27.006436 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000003 |
vulnerable | 2026-06-08 05:08:27.005971 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000002 |
vulnerable | 2026-06-08 05:08:27.005422 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2539 |
vulnerable | 2026-06-08 05:07:42.567922 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10400 |
vulnerable | 2026-06-08 05:07:17.847224 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7712 |
vulnerable | 2026-06-08 05:07:01.744783 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7711 |
vulnerable | 2026-06-08 05:07:01.744396 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9753 |
vulnerable | 2026-06-08 05:06:12.938003 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9752 |
vulnerable | 2026-06-08 05:06:12.937553 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6528 |
vulnerable | 2026-06-08 05:03:00.639520 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0828 |
vulnerable | 2026-06-08 04:50:17.873209 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.