Approved changes feed: RSS · Atom

cpe:2.3:a:atutor:atutor:1.6.4:*:*:*:*:*:*:*

part: a version: 1.6.4 update: *

VendorAtutor (69bf6287-fa98-5b8e-aa4b-51a5abfbd635)
ProductAtutor (566e6236-9603-5339-af6e-7528a1178bf0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/atutor/atutor purl2cpe 2026-06-01 10:16:02.928452
pkg:sourceforge/atutor purl2cpe 2026-06-01 10:16:02.928453

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-6528 vulnerable 2026-06-08 05:03:00.653341 Details available
Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) themes/default/tile_search/index.tmpl.php, (2) login.php, (3) search.php, (4) password_reminder.php, (5) login.php/jscripts/infusion, (6) login.php/mods/_standard/flowplayer, (7) browse.php/jscripts/infusion/framework/fss, (8) registration.php/themes/default/ie_styles.css, (9) about.php, or (10) themes/default/social/basic_profile.tmpl.php.
Published: 2013-01-31T02:00:00.000Z
Updated: 2024-08-06T21:28:39.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0971 vulnerable 2026-06-08 04:54:04.228907 Details available
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor privileges, to inject arbitrary web script or HTML via the (1) Question and (2) Choice fields in tools/polls/add.php, the (3) Type and (4) Title fields in tools/groups/create_manual.php, and the (5) Title field in assignments/add_assignment.php. NOTE: some of these details are obtained from third party information.
Published: 2010-03-16T18:26:00.000Z
Updated: 2024-08-07T01:06:52.521Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.