CVE-2010-0971: XSS
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.6.4 allow remote authenticated users, with Instructor privileges, to inject arbitrary web script or HTML via the (1) Question and (2) Choice fields in tools/polls/add.php, the (3) Type and (4) Title fields in tools/groups/createmanual.php, and the (5) Title field in assignments/addassignment.php. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0971?
CVE-2010-0971 is categorized as a moderate severity vulnerability due to its potential for Cross-Site Scripting (XSS) attacks.
How do I fix CVE-2010-0971?
To fix CVE-2010-0971, update ATutor to a version later than 1.6.4 that addresses these XSS vulnerabilities.
Who is affected by CVE-2010-0971?
CVE-2010-0971 affects remote authenticated users with Instructor privileges on ATutor version 1.6.4.
What type of vulnerabilities are present in CVE-2010-0971?
CVE-2010-0971 contains multiple cross-site scripting (XSS) vulnerabilities that allow script injection.
Where can CVE-2010-0971 be exploited?
CVE-2010-0971 can be exploited through the Question, Choice, Type, and Title fields in specific tools within ATutor.