PT-2005-3800 · Atutor · Atutor

Retrogod · Publicado 2005-09-16 · Atualizado 2017-07-11 · CVE-2005-2954

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ATutor versions prior to 1.5.1 pl1

Description The issue allows remote attackers to execute arbitrary SQL commands via the email field in the password reminder.php file.

Recommendations For versions prior to 1.5.1 pl1, update to version 1.5.1 pl1 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-2954

Produtos afetados

Atutor

Referências · 11

• 🔥 http://rgod.altervista.org/atutor151.html · Exploit
• 🔥 https://exploit-db.com/exploits/26257 · Exploit
• 🔥 http://securityfocus.com/bid/14831 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2954 · Nota
• http://osvdb.org/19411 · Nota
• http://vupen.com/english/advisories/2005/1751 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2954 · Nota de Segurança
• http://atutor.ca/news.php#150905 · Nota
• http://secunia.com/advisories/16813 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=112671176100432&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22282 · Nota