CVE-2005-2649: XSS
Published Aug 21, 2005
·Updated
Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML via (1) course parameter in login.php or (2) words parameter in search.php.
Affected Software
1 affected component
Adaptive Technology Resource Centre Atutor=1.5.1
Event History
Aug 21, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2649?
CVE-2005-2649 has a moderate severity rating as it allows for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2005-2649?
To fix CVE-2005-2649, ensure that input validation and output encoding are properly implemented in the vulnerable parameters.
3
What software is affected by CVE-2005-2649?
CVE-2005-2649 affects ATutor version 1.5.1.
4
Can CVE-2005-2649 lead to data theft?
Yes, attackers exploiting CVE-2005-2649 can potentially steal sensitive user data through XSS.
5
Is CVE-2005-2649 still a concern today?
CVE-2005-2649 may still pose a risk if ATutor 1.5.1 is in use and has not been patched or upgraded.