Approved changes feed: RSS · Atom

cpe:2.3:a:atutor:acontent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAtutor (69bf6287-fa98-5b8e-aa4b-51a5abfbd635)
ProductAcontent (1f07dd43-a0de-5c76-9c32-42d15edb6e06)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/danidemi/acontent purl2cpe 2026-06-01 10:16:02.940880
pkg:github/atutor/acontent purl2cpe 2026-06-01 10:16:02.940883

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10557 vulnerable 2026-06-08 05:16:35.292260 Details available
An issue was discovered in AContent through 1.4. It allows the user to run commands on the server with a low-privileged account. The upload section in the file manager page contains an arbitrary file upload vulnerability via upload.php. The extension .php7 bypasses file upload restrictions.
Published: 2020-03-16T14:31:09.000Z
Updated: 2024-08-04T11:06:09.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5168 vulnerable 2026-06-08 05:02:55.043471 Details available
ATutor AContent before 1.2-1 allows remote attackers to modify arbitrary user passwords or category names via a direct request to (1) user/index_inline_editor_submit.php or (2) course_category/index_inline_editor_submit.php.
Published: 2012-10-22T23:00:00.000Z
Updated: 2024-08-06T20:58:02.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5167 vulnerable 2026-06-08 05:02:55.042929 Details available
Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to execute arbitrary SQL commands via the (1) field parameter to course_category/index_inline_editor_submit.php or (2) user/index_inline_editor_submit.php; or (3) id parameter to user/user_password.php.
Published: 2012-10-22T23:00:00.000Z
Updated: 2024-08-06T20:58:03.263Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.