CVE-2005-2956

ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain user chat conversations via direct requests to those files.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

2.87% chance of exploitation in the next 30 days, 87th percentile

Published

2005-09-16

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/26258

Security advisories

• http://rgod.altervista.org/atutor151.html
• http://www.securityfocus.com/bid/14832

References

• CVE Record
• NVD entry