ID de Prueba:	1.3.6.1.4.1.25623.1.0.902728
Categoría:	Web application abuses
Título:	Atutor Multiple Vulnerabilities
Resumen:	Atutor is prone to information disclosure, SQL injection, and cross site scripting vulnerabilities.
Descripción:	Summary: Atutor is prone to information disclosure, SQL injection, and cross site scripting vulnerabilities. Vulnerability Insight: Multiple flaws are due to an: - Input passed to the 'lang' parameter in '/documentation/index_list.php' is not properly sanitised before being returned to the user. - Input passed to the 'p_course', 'name' and 'value' parameters in '/mods/_standard/social/set_prefs.php' scripts is not properly sanitised before being used in SQL queries. - Input passed via the 'search_friends_HASH' POST parameter, where HASH is the value generated by the 'rand_key' parameter, to the '/mods/_standard/social/index_public.php' script is not properly sanitised before being returned to the user. Vulnerability Impact: Successful exploitation will let attackers to execute arbitrary script code or to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. Affected Software/OS: ATutor version 2.0.2 Solution: Upgrade to ATutor version 2.0.3 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.