Approved changes feed: RSS · Atom

cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5_rc_1:*:*:*:*:*:*:*

part: a version: 1.5_rc_1 update: *

VendorAdaptive Technology Resource Centre (94088f96-8c62-59c6-b301-d7adf85e636d)
ProductAtutor (62bb5133-b69b-5c5f-b1d7-624741f12365)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/atutor/atutor_opencaps purl2cpe 2026-06-01 10:17:55.517650

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3821 vulnerable 2026-06-03 14:27:36.013008 Details available
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in (a) index_list.php and (2) year, (3) month, and (4) day parameter in (b) registration.php.
Published: 2006-07-25T00:00:00.000Z
Updated: 2024-08-07T18:48:39.219Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2044 vulnerable 2026-06-03 14:27:00.912146 Details available
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitrary web script or HTML via the (1) show_course parameter to browse.php, (2) subject parameter to contact.php, (3) cid parameter to content.php, (4) l parameter to inbox/send_message.php, the (5) search, (6) words, (7) include, (8) find_in, (9) display_as, or (10) search parameter to search.php, the (11) submit, (12) query, or (13) field parameter to tile.php, the (14) us parameter to forum/subscribe_forum.php, or the (15) roles[], (16) status, (17) submit, or (18) reset_filter parameters to directory.php.
Published: 2005-06-22T04:00:00.000Z
Updated: 2024-09-17T00:21:37.469Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.