CVE-2005-2649
Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML via (1) course parameter in login.php or (2) words parameter in search.php.
- Affected products
- Atutor
- Adaptive Technology Resource Centre Atutor
- = 1.5.1
- Fix
- Available
- CVSS 2.0
- 4.3 MEDIUM
- EPSS
- 3.6% (88th percentile)
- NVD status
- Modified
- Published
- 2005-08-21
CVE-2005-2649 at NVD
1 known exploit for CVE-2005-2649
Proof-of-concept code and exploit modules indexed by Sploitus