CVE-2006-3484
LOW 2.6EPSS 2.7%
Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) show_courses or (2) current_cat parameters to (a) admin/create_course.php, show_courses parameter to (b) users/create_course.php, (3) p parameter to (c) documentation/admin/, (4) forgot parameter to (d) password_reminder.php, (5) cat parameter to (e) users/browse.php, or the (6) submit parameter to admin/fix_content.php.
- CVSS v2.0
- 2.6 LOW
AV:N/AC:H/Au:N/C:N/I:P/A:N - EPSS
- 2.69% chance of exploitation in the next 30 days, 85th percentile
- Published
- 2006-07-10
- Updated
- 2024-08-07
ExploitDB entries (5)
- https://www.exploit-db.com/exploits/28180
- https://www.exploit-db.com/exploits/28179
- https://www.exploit-db.com/exploits/28178
- https://www.exploit-db.com/exploits/28177
- https://www.exploit-db.com/exploits/28176