CVE-2014-9753
confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing user via the auto_login parameter.
- Affected products
- Atutor
- Atutor
- ≤ 2.2
- Fix
- Available
- CVSS 3.1
- 9.8 CRITICAL
- EPSS
- 2.9% (86th percentile)
- Weakness
- CWE-287
- NVD status
- Modified
- Published
- 2020-02-11
CVE-2014-9753 at NVD
1 known exploit for CVE-2014-9753
Proof-of-concept code and exploit modules indexed by Sploitus