SQL Injection Vulnerability in ATutor AContent Platform by ATutor Inc.
CVE-2012-5167

Currently unrated

Key Information:

Vendor

Atutor

Status
Acontent
Vendor
CVE Published:
22 October 2012

What is CVE-2012-5167?

Multiple SQL injection vulnerabilities exist in the ATutor AContent platform, allowing remote attackers to execute arbitrary SQL commands. These vulnerabilities are found in certain parameters of key scripts such as course_category/index_inline_editor_submit.php and user/index_inline_editor_submit.php. By exploiting these weaknesses, attackers could potentially manipulate database queries, resulting in unauthorized actions or access to sensitive data.

References

http://osvdb.org/86425
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/51014
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/56100
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2012-5167 : SQL Injection Vulnerability in ATutor AContent Platform by ATutor Inc.