high7.5Public exploit code
CVE-2005-2954
SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbitrary SQL commands via the email field.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ATutor 1.5.1 - 'password_reminder.php' SQL Injection2005-09-14 · webapps · php · Verified
Impact
SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbitrary SQL commands via the email field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adaptive Technology Resource Centre | Atutor | Version 1.5.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=112671176100432&w=2
- http://rgod.altervista.org/atutor151.html
- http://secunia.com/advisories/16813/
- http://www.atutor.ca/news.php#150905
- http://www.osvdb.org/19411
- http://www.securityfocus.com/bid/14831
- http://www.vupen.com/english/advisories/2005/1751
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22282
- http://marc.info/?l=bugtraq&m=112671176100432&w=2
- http://rgod.altervista.org/atutor151.html
- http://secunia.com/advisories/16813/
- http://www.atutor.ca/news.php#150905
- http://www.osvdb.org/19411
- http://www.securityfocus.com/bid/14831
- http://www.vupen.com/english/advisories/2005/1751
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22282