JVNDB-2006-000632

[Japanese]
JVNDB-2006-000632
ATutor cross-site scripting vulnerability
Overview
ATutor, an open source e-learning content management system, contains a cross-site scripting vulnerability.
CVSS Severity (What is CVSS?)
CVSS V2 Severity: Base Metrics 4.3 (Medium) [IPA Score] Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
Affected Products

ATRC ATutor 1.5.3 RC2 and earlier

Impact
An arbitrary script may be executed on the user's web browser. Authentication information could be stolen as a result.
Solution

Vendor Information
ATRC ATutor Learning Content Management System : Top Page
CWE (What is CWE?)

CVE (What is CVE?)

References
JVN : JVN#44846612
Revision History
[2008/05/21] Web page published

ATutor cross-site scripting vulnerability