high7.5
CVE-2007-0381
Multiple SQL injection vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters.
Impact
Multiple SQL injection vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters. NOTE: CVE analysis suggests that the vendor fixed these issues.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adaptive Technology Resource Centre | Atutor | Version 1.5.3.2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html
- http://osvdb.org/34660
- http://www.atutor.ca/atutor/mantis/changelog_page.php
- http://www.hackers.ir/advisories/festival.txt
- http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html
- http://osvdb.org/34660
- http://www.atutor.ca/atutor/mantis/changelog_page.php
- http://www.hackers.ir/advisories/festival.txt