NVD

Id
62330  
Name
CVE-2006-3662  
Description
** DISPUTED ** SQL injection vulnerability in index.php in ATutor 1.5.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter. NOTE: this issue has been disputed by the vendor, who states "The mentioned SQL injection vulnerability is not possible." However, the relevant source code suggests that this issue may be legitimate, and the parameter is cleansed in 1.5.3.1.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-07-18  
Modified Date
2008-09-05  
Seq
2006-3662  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
323050 62330 CVE-2006-3662 20060708 ATutor 1.5.3 Cross Site Scripting  View
323051 62330 CVE-2006-3662 20060711 Re: ATutor 1.5.3 Cross Site Scripting  View
323052 62330 CVE-2006-3662 20060721 Re: ATutor 1.5.3 Cross Site Scripting  View
323053 62330 CVE-2006-3662 18898  View
323054 62330 CVE-2006-3662 atutor-index-sql-injection(27620)  View

Related JVN