CVE-2005-2954: SQL Injection

Published Sep 16, 2005

Updated

SQL injection vulnerability in passwordreminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbitrary SQL commands via the email field.

Affected Software

1 affected component

Adaptive Technology Resource Centre Atutor=1.5.1

Remediation

Patch Available

http://secunia.com/advisories/16813/

Event History

Sep 16, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2954?

CVE-2005-2954 is classified as a medium to high severity vulnerability due to its potential for remote SQL command execution.

How can I fix CVE-2005-2954?

To fix CVE-2005-2954, upgrade to ATutor version 1.5.1 pl1 or later, which addresses this SQL injection vulnerability.

What does CVE-2005-2954 affect?

CVE-2005-2954 specifically affects ATutor versions prior to 1.5.1 pl1 in the password_reminder.php file.

What type of attack is facilitated by CVE-2005-2954?

CVE-2005-2954 facilitates SQL injection attacks, allowing attackers to send arbitrary SQL commands through the email field.

Can I exploit CVE-2005-2954 without authentication?

Yes, CVE-2005-2954 can be exploited by unauthenticated remote attackers, making it a critical vulnerability for affected systems.