CVE-2006-3662

Published: Jul 18, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in index.php in ATutor 1.5.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter. NOTE: this issue has been disputed by the vendor, who states "The mentioned SQL injection vulnerability is not possible." However, the relevant source code suggests that this issue may be legitimate, and the parameter is cleansed in 1.5.3.1

Affected (1)

Products: Adaptive Technology Resource Centre: Atutor

Adaptive Technology Resource Centre

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Adaptive Technology Resource Centre Atutor	Version 1.5.3

References (12)

http://archives.neohapsis.com/archives/bugtraq/2006-07/0096.html

Source: cve@mitre.org

Exploit

http://www.osvdb.org/28188

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/439873/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/440837/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/18898

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/27620

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2006-07/0096.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.osvdb.org/28188

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/439873/100/100/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/440837/100/100/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/18898

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/27620

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.