Atutor vulnerabilities

Products

• Atutor 44
• Acontent 6
• Acollab 4

Newest

• atutor Reflected XSS in ATutor CVE-2026-64972 4.8 MediumAugust 20, 2026
• atutor Reflected XSS in ATutor CVE-2026-64971 4.8 MediumAugust 20, 2026
• atutor Stored XSS in ATutor CVE-2026-64970 5.1 MediumAugust 20, 2026
• atutor Insecure Direct Object Reference in ATutor CVE-2026-64969 5.3 MediumAugust 20, 2026
• atutor Server-Side Request Forgery in ATutor CVE-2026-64968 5.1 MediumAugust 20, 2026
• atutor Path Traversal in ATutor CVE-2026-64967 6.9 MediumAugust 20, 2026
• atutor Path Traversal leading to Remote Code Execution in ATutor CVE-2026-64966 8.7 HighAugust 20, 2026
• atutor Missing Authorization Check in ATutor CVE-2026-64965 5.3 MediumAugust 20, 2026
• atutor Generation of Predictable Email Confirmation Token in ATutor CVE-2026-64964 6.3 MediumAugust 20, 2026
• atutor Path Traversal in ATutor CVE-2026-64963 2.3 LowAugust 20, 2026
• atutor Cross-Site Request Forgery (CSRF) in ATutor CVE-2026-64962 5.1 MediumAugust 20, 2026
• atutor Authentication Bypass in ATutor CVE-2026-64961 6.3 MediumAugust 20, 2026
• atutor Remote Code Execution via Unrestricted File Upload in ATutor CVE-2026-64960 8.7 HighAugust 20, 2026
• atutor Reflected XSS in ATutor CVE-2026-6956 5.1 MediumMay 11, 2026
• atutor Reflected XSS in ATutor CVE-2026-6909 5.1 MediumMay 11, 2026
• atutor ATutor 2.2.4 - 'id' SQL Injection CVE-2020-37147 7.0 HighFebruary 6, 2026
• atutor A Cross-site scripting (XSS) vulnerability in the function encrypt_password() in login.tmpl.php... CVE-2023-27008 6.1 MediumMarch 28, 2023
• atutor An Access Control vulnerability exists in ATutor 2.2.4 in password_reminder.php when the g, id, h... CVE-2021-43498 7.5 HighApril 8, 2022
• atutor A reflected cross site scripting (XSS) vulnerability in the /header.tmpl.php component of ATutor... CVE-2020-23341 6.1 MediumAugust 17, 2021
• atutor acontent An issue was discovered in AContent through 1.4. It allows the user to run commands on the server... CVE-2020-10557 8.8 HighMarch 16, 2020
• atutor Multiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote attackers... CVE-2015-1583 8.8 HighMarch 2, 2020
• atutor confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain... CVE-2014-9753 9.8 CriticalFebruary 11, 2020
• atutor In ATutor 2.2.4, an unauthenticated attacker can change the application settings and force it to... CVE-2019-16114 9.8 CriticalSeptember 9, 2019
• atutor ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code... CVE-2019-12169 Public exploit EPSS 72.2% 8.8 HighJune 3, 2019
• atutor ATutor through 2.2.4 is vulnerable to arbitrary file uploads via the mods/_core/backups/upload... CVE-2019-12170 Public exploit 8.8 HighMay 17, 2019
• atutor An issue was discovered in ATutor through 2.2.4. It allows the user to run commands on the server... CVE-2019-11446 Public exploit 8.8 HighApril 22, 2019
• atutor A stored-self XSS exists in ATutor through v2.2.4, allowing an attacker to execute HTML or... CVE-2019-7172 6.1 MediumJanuary 29, 2019
• atutor Multiple cross-site scripting (XSS) vulnerabilities in ATutor LMS version 2.2. CVE-2015-6521 5.4 MediumOctober 10, 2017
• atutor Cross-Site Scripting (XSS) was discovered in ATutor before 2.2.3. The vulnerability exists due to... CVE-2017-14981 5.4 MediumOctober 2, 2017
• atutor Cross-site scripting (XSS) vulnerability in popuphelp.php in ATutor 2.2 and earlier allows remote... CVE-2015-7711 6.1 MediumAugust 31, 2017
• atutor Directory Traversal exists in ATutor before 2.2.2 via the icon parameter to /mods/_core/courses... CVE-2016-10400 7.5 HighJuly 22, 2017
• atutor ATutor version 2.2.1 and earlier are vulnerable to a SQL injection in the Assignment Dropbox,... CVE-2017-1000004 9.8 CriticalJuly 13, 2017
• atutor ATutor versions 2.2.1 and earlier are vulnerable to an incorrect access control check... CVE-2017-1000003 9.8 CriticalJuly 13, 2017
• atutor ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal and file extension... CVE-2017-1000002 Public exploit EPSS 30.8% 9.8 CriticalJuly 13, 2017
• atutor SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote... CVE-2016-2555 Public exploit EPSS 79.8% 9.8 CriticalApril 13, 2017
• atutor Multiple Cross-Site Scripting (XSS) issues were discovered in ATutor 2.2.2. The vulnerabilities... CVE-2017-6483 6.1 MediumMarch 5, 2017
• atutor Cross-site request forgery (CSRF) vulnerability in install_modules.php in ATutor before 2.2.2... CVE-2016-2539 Public exploit 8.8 HighFebruary 7, 2017
• atutor Multiple eval injection vulnerabilities in mods/_standard/gradebook/edit_marks.php in ATutor 2.2... CVE-2015-7712 6.5 MediumNovember 16, 2015
• atutor Unrestricted file upload vulnerability in mods/_core/properties/lib/course.inc.php in ATutor... CVE-2014-9752 6.5 MediumNovember 16, 2015
• atutor Cross-site scripting (XSS) vulnerability in mods/_standard/forums/admin/forum_add.php in ATutor 2... CVE-2014-2091 Public exploit 3.5 LowMarch 2, 2014
• atutor Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 2.1 allow remote attackers... CVE-2012-6528 Public exploit 4.3 MediumJanuary 31, 2013
• atutor acontent user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access,... CVE-2012-5454 6.5 MediumOctober 22, 2012
• atutor acontent SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1... CVE-2012-5453 Public exploit 6.5 MediumOctober 22, 2012
• atutor acontent Multiple cross-site scripting (XSS) vulnerabilities in file_manager/preview_top.php in ATutor... CVE-2012-5169 4.3 MediumOctober 22, 2012
• atutor acontent ATutor AContent before 1.2-1 allows remote attackers to modify arbitrary user passwords or... CVE-2012-5168 7.5 HighOctober 22, 2012
• atutor acontent Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to... CVE-2012-5167 Public exploit 7.5 HighOctober 22, 2012
• atutor ATutor 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php... CVE-2011-3706 5.0 MediumSeptember 23, 2011
• atutor achecker Cross-site scripting (XSS) vulnerability in index.php in AChecker 1.0 allows remote attackers to... CVE-2010-3455 4.3 MediumSeptember 17, 2010
• atutor acollab AdPeeps 8.5d1 has a default password of admin for the admin account, which makes it easier for... CVE-2009-4945 7.5 HighJuly 22, 2010
• atutor acollab Multiple cross-site scripting (XSS) vulnerabilities in ATRC ACollab 1.2 allow remote attackers to... CVE-2009-4944 4.3 MediumJuly 22, 2010
• Show olderLoading…