CVE-2006-3821: XSS

Published Jul 25, 2006

Updated

Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in (a) indexlist.php and (2) year, (3) month, and (4) day parameter in (b) registration.php.

Affected Software

8 affected components

Adaptive Technology Resource Centre Atutor=1.5_rc_1

Adaptive Technology Resource Centre Atutor=1.4.2

Adaptive Technology Resource Centre Atutor=1.5.1

Adaptive Technology Resource Centre Atutor=1.4.1

Adaptive Technology Resource Centre Atutor=1.5.1_pl2

Adaptive Technology Resource Centre Atutor=1.5.1_pl1

Adaptive Technology Resource Centre Atutor=1.4.3

Adaptive Technology Resource Centre Atutor=1.5.3

Event History

Jul 25, 2006

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-3821?

CVE-2006-3821 is considered a moderate-severity vulnerability due to its potential for exploitation through cross-site scripting.

How do I fix CVE-2006-3821?

To fix CVE-2006-3821, update ATutor to version 1.5.4 or later, which addresses the XSS vulnerabilities.

What versions of ATutor are affected by CVE-2006-3821?

CVE-2006-3821 affects ATutor versions 1.4.1, 1.4.2, 1.4.3, 1.5.1, 1.5.1_pl1, 1.5.1_pl2, and 1.5.3.

What are the possible impacts of exploiting CVE-2006-3821?

Exploiting CVE-2006-3821 could allow an attacker to execute arbitrary web scripts or HTML, potentially compromising user data or credentials.

Are there any workarounds for CVE-2006-3821 if I cannot update immediately?

Temporary workarounds for CVE-2006-3821 include sanitizing user input and implementing content security policies to mitigate XSS risks.