cbcvebase.
CVE-2012-6528
published 2013-01-31

CVE-2012-6528: Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1)…

PriorityP421medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
1.85%
76.5th percentile
Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 2.1 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) themes/default/tile_search/index.tmpl.php, (2) login.php, (3) search.php, (4) password_reminder.php, (5) login.php/jscripts/infusion, (6) login.php/mods/_standard/flowplayer, (7) browse.php/jscripts/infusion/framework/fss, (8) registration.php/themes/default/ie_styles.css, (9) about.php, or (10) themes/default/social/basic_profile.tmpl.php.

Affected

25 ranges
VendorProductVersion rangeFixed in
atutoratutor<= 2.0—
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
atutoratutor——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.