Sploitus

39 exploited vulnerabilities in Atutor

Vulnerabilities with publicly known exploits

Vendors
Atutorspaces, Atutor
With known exploits
39
Affected Atutor versions
= 2.2.1, 2.2.4, 2.2, 1.6.1, 0.9.6, 0.9.7, 1.0, 1.2.1, 1.2.2, 1.3, 1.3.1, 1.3.2, 1.3.3, 1.4, 1.4.1, 1.4.2, 1.4.3, 1.5.1, 1.5.2, 1.5.3, 1.5.3.1, 1.5.3.2, 1.5.4, 1.5.5, 1.6, 2.0, 1.6.4, 2.0.1, 2.0.2, 2.0.3, 2.1.1
Affected Atutor Acontent versions
≤ 1.2
Affected Adaptive Technology Resource Centre Atutor versions
= 1.5.3, 1.5.1_pl2, 1.4.1, 1.4.2, 1.4.3, 1.5.1, 1.5.1_pl1, 1.5.3.1, 1.5_rc_1, 1.5.3_rc2

Vulnerabilities with exploits

Highest CVSS first — 24 of these already have exploit code on Sploitus

CVE-2019-16114
CVSS 9.8 CRITICAL 2019-09-09FIX AVAILABLE
CVE-2016-2555 6 exploits
CVSS 9.8 CRITICAL 2017-04-13FIX AVAILABLE
Exploit for Cross-site Scripting in AtmailATutor 2.2.1 - SQL Injection / Remote Code Execution (Metasploit)
CVE-2019-12170 2 exploits
CVSS 9.0 HIGH 2019-05-17FIX AVAILABLE
Exploit for Path Traversal in AtutorExploit for Unrestricted Upload of File with Dangerous Type in Atutor
CVE-2019-12169 7 exploits
CVSS 8.8 HIGH 2019-06-03FIX AVAILABLE
ATutor 2.2.4 Directory Traversal / Remote Code Execution ExploitATutor 2.2.4 Directory Traversal / Remote Code Execution
CVE-2019-11446 1 exploit
CVSS 8.8 HIGH 2019-04-22FIX AVAILABLE
ATutor < 2.2.4 - 'file_manager' Remote Code Execution (Metasploit)
CVE-2016-2539 5 exploits
CVSS 8.8 HIGH 2017-02-07FIX AVAILABLE
ATutor LMS - install_modules.php Cross-Site Request Forgery / Remote Code ExecutionATutor LMS - install_modules.php Cross-Site Request Forgery Remote Code Execution
CVE-2021-43498
CVSS 7.5 HIGH 2022-04-08FIX AVAILABLE
CVE-2014-9753 1 exploit
CVSS 7.5 HIGH 2020-02-11FIX AVAILABLE
ATutor 2.2 Session Variable Overloading Vulnerability
CVE-2016-10400
CVSS 7.5 HIGH 2017-07-22FIX AVAILABLE
CVE-2012-5167 4 exploits
CVSS 7.5 HIGH 2012-10-22FIX AVAILABLE
ATutor 1.2 - Multiple VulnerabilitiesATutor 1.2 - Multiple Vulnerabilities
CVE-2006-3662 1 exploit
CVSS 7.5 HIGH 2006-07-17FIX AVAILABLE
ATutor 1.5.3 - Multiple Input Validation Vulnerabilities
CVE-2005-4155 1 exploit
CVSS 7.5 HIGH 2005-12-11FIX AVAILABLE
ATutor 1.5.1pl2 - SQL Injection / Command Execution
CVE-2005-3405 1 exploit
CVSS 7.5 HIGH 2005-11-01FIX AVAILABLE
ATutor 1.x - 'forum.inc.php' Arbitrary Command Execution
CVE-2005-3404 2 exploits
CVSS 7.5 HIGH 2005-11-01FIX AVAILABLE
ATutor 1.x - 'body_header.inc.php?section' Local File InclusionATutor 1.x - 'print.php?section' Remote File Inclusion
CVE-2005-2954 1 exploit
CVSS 7.5 HIGH 2005-09-16FIX AVAILABLE
ATutor 1.5.1 - 'password_reminder.php' SQL Injection
CVE-2020-37147
CVSS 7.1 HIGH 2026-02-06FIX AVAILABLE
CVE-2015-1583 1 exploit
CVSS 6.8 MEDIUM 2020-03-02
ATutor LCMS 2.2 Cross Site Request Forgery
CVE-2015-7712 2 exploits
CVSS 6.5 MEDIUM 2015-11-16
ATutor 2.2 PHP Code Injection VulnerabilityATutor 2.2 PHP Code Injection
CVE-2008-3368 1 exploit
CVSS 6.5 MEDIUM 2008-07-30FIX AVAILABLE
ATutor 1.6.1-pl1 - 'import.php' Remote File Inclusion
CVE-2006-3996 1 exploit
CVSS 6.5 MEDIUM 2006-08-05FIX AVAILABLE
ATutor 1.5.3.1 - 'links' Blind SQL Injection
CVE-2023-27008
CVSS 6.1 MEDIUM 2023-03-28FIX AVAILABLE
CVE-2020-23341
CVSS 6.1 MEDIUM 2021-08-17
CVE-2019-7172
CVSS 6.1 MEDIUM 2019-01-29FIX AVAILABLE
CVE-2017-6483
CVSS 6.1 MEDIUM 2017-03-05FIX AVAILABLE
CVE-2017-14981
CVSS 5.4 MEDIUM 2017-10-02FIX AVAILABLE
CVE-2026-6956
CVSS 5.1 MEDIUM 2026-05-11
CVE-2026-6909
CVSS 5.1 MEDIUM 2026-05-11
CVE-2011-3706
CVSS 5.0 MEDIUM 2011-09-23FIX AVAILABLE
CVE-2005-2956 1 exploit
CVSS 5.0 MEDIUM 2005-09-16FIX AVAILABLE
ATutor 1.5.1 - Chat Logs Remote Information Disclosure
CVE-2005-2955
CVSS 4.6 MEDIUM 2005-09-16FIX AVAILABLE
CVE-2015-7711 2 exploits
CVSS 4.3 MEDIUM 2017-08-31FIX AVAILABLE
ATutor 2.2 Cross Site Scripting VulnerabilityATutor 2.2 Cross Site Scripting
CVE-2012-6528 1 exploit
CVSS 4.3 MEDIUM 2013-01-31FIX AVAILABLE
ATutor 2.0.3 - Multiple Cross-Site Scripting Vulnerabilities
CVE-2006-3821
CVSS 4.3 MEDIUM 2006-07-25FIX AVAILABLE
CVE-2005-3403
CVSS 4.3 MEDIUM 2005-11-01
CVE-2005-2649 1 exploit
CVSS 4.3 MEDIUM 2005-08-21FIX AVAILABLE
ATutor 1.5.1 - 'login.php?course' Cross-Site Scripting
CVE-2005-2044 9 exploits
CVSS 4.3 MEDIUM 2005-06-16
ATutor 1.4.3 - 'browse.php?show_course' Cross-Site ScriptingATutor 1.4.3 - 'contact.php?subject' Cross-Site Scripting
CVE-2014-2091 1 exploit
CVSS 3.5 LOW 2014-03-02FIX AVAILABLE
ATutor - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities
CVE-2006-3484 5 exploits
CVSS 2.6 LOW 2006-07-10FIX AVAILABLE
ATutor 1.5.x - 'create_course.php' Multiple Cross-Site Scripting VulnerabilitiesATutor 1.5.x - '/documentation/admin/index.php' Cross-Site Scripting
CVE-2010-0971 1 exploit
CVSS 2.1 LOW 2010-03-16FIX AVAILABLE
ATutor 1.6.4 - Multiple Cross-Site Scripting Vulnerabilities