CVE-2005-2044: XSS
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitrary web script or HTML via the (1) showcourse parameter to browse.php, (2) subject parameter to contact.php, (3) cid parameter to content.php, (4) l parameter to inbox/sendmessage.php, the (5) search, (6) words, (7) include, (8) findin, (9) displayas, or (10) search parameter to search.php, the (11) submit, (12) query, or (13) field parameter to tile.php, the (14) us parameter to forum/subscribeforum.php, or the (15) roles[], (16) status, (17) submit, or (18) resetfilter parameters to directory.php.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2044?
CVE-2005-2044 is classified as a moderate severity vulnerability due to its potential to exploit cross-site scripting issues.
How do I fix CVE-2005-2044?
To fix CVE-2005-2044, upgrade to ATutor version 1.6 or later where the vulnerabilities are addressed.
What are the affected versions of ATutor for CVE-2005-2044?
The affected versions of ATutor for CVE-2005-2044 are 1.4.3 and 1.5 RC 1.
What types of attacks are possible due to CVE-2005-2044?
CVE-2005-2044 allows remote attackers to inject arbitrary web scripts or HTML, potentially leading to session hijacking or data theft.
How can I determine if my site is affected by CVE-2005-2044?
You can determine if your site is affected by CVE-2005-2044 by checking if you are running ATutor versions 1.4.3 or 1.5 RC 1 and testing for XSS vulnerabilities.