Advisories · Technology
ATutor.
Every CVE that names ATutor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.8 Medium
Reflected XSS in ATutor
- ATutor
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
Reflected XSS in ATutor
- ATutor
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Stored XSS in ATutor
- ATutor
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Insecure Direct Object Reference in ATutor
- ATutor
- Broken access control
- CVSS 5.1 Medium
Server-Side Request Forgery in ATutor
- ATutor
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
Path Traversal in ATutor
- ATutor
- Path traversal
- CVSS 8.7 High
Path Traversal leading to Remote Code Execution in ATutor
- ATutor
- Path traversal
- CVSS 5.3 Medium
Missing Authorization Check in ATutor
- ATutor
- Broken access control
- CVSS 6.3 Medium
Generation of Predictable Email Confirmation Token in ATutor
- ATutor
- CWE-340
- CVSS 2.3 Low
Path Traversal in ATutor
- ATutor
- Path traversal
- CVSS 5.1 Medium
Cross-Site Request Forgery (CSRF) in ATutor
- ATutor
- Cross-site request forgery (CSRF)
- CVSS 6.3 Medium
Authentication Bypass in ATutor
- ATutor
- Broken access control
- CVSS 8.7 High
Remote Code Execution via Unrestricted File Upload in ATutor
- ATutor
- Unrestricted file upload
- CVSS 5.1 Medium
Reflected XSS in ATutor
- ATutor
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Reflected XSS in ATutor
- ATutor
- Cross-site scripting (XSS)
- CVSS 7.0 High
ATutor 2.2.4 - 'id' SQL Injection
- ATutor
- SQL injection