Cross-Site Scripting Flaw in ATutor by THe ATutor Group
CVE-2014-2091

Currently unrated

Key Information:

Vendor

Atutor

Status
Atutor
Vendor
CVE Published:
2 March 2014

What is CVE-2014-2091?

A Cross-site scripting (XSS) vulnerability exists in ATutor 2.1.1, affecting the admin interface at mods/_standard/forums/admin/forum_add.php. This flaw allows remote authenticated administrators to inject arbitrary web scripts or HTML through the title parameter in an add_forum action. The implications of this vulnerability may extend beyond administrative privilege boundaries, potentially impacting the overall security of the ATutor system.

References

http://packetstormsecurity.com/files/125348/ATutor-2.1.1-...
x_refsource_MISC
http://www.securityfocus.com/bid/65744
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.