CVE-2008-0828

Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) attributes such as style and onmouseover in (a) forum post or (b) mail; or (2) the website field of the profile.

Link	Resource
http://www.securityfocus.com/bid/27855	Patch
http://secunia.com/advisories/29015	Vendor Advisory
http://securityreason.com/securityalert/3670
http://www.securityfocus.com/archive/1/488293/100/0/threaded

Configuration 1

cpe:2.3:a:atutor:atutor:1.3.1:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.5.3:rc2:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:0.9.7:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.5.1:pl2:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.3:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:*:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.5.2:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.3.2:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:0.9.6:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.4.3:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.5.3.1:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.0:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.5.1:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.4.2:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.5.3.2:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.5.4:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.5.1:pl1:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.2.1:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.5.3:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.2.2:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.4.1:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.4:*:*:*:*:*:*:* cpe:2.3:a:atutor:atutor:1.3.3:*:*:*:*:*:*:*

---

Published : 2008-02-19 09:44

Updated : 2018-10-15 10:03

---

NVD link : CVE-2008-0828

Mitre link : CVE-2008-0828

No products.

CWE-79