CVE-2006-3821

Published: Jul 25, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in (a) index_list.php and (2) year, (3) month, and (4) day parameter in (b) registration.php.

Affected (8)

Products: Adaptive Technology Resource Centre: Atutor

Adaptive Technology Resource Centre

1 product

Atutor

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Adaptive Technology Resource Centre Atutor	Version 1.4.1
Adaptive Technology Resource Centre Atutor	Version 1.4.2
Adaptive Technology Resource Centre Atutor	Version 1.4.3
Adaptive Technology Resource Centre Atutor	Version 1.5.1
Adaptive Technology Resource Centre Atutor	Version 1.5.1_pl1
Adaptive Technology Resource Centre Atutor	Version 1.5.1_pl2
Adaptive Technology Resource Centre Atutor	Version 1.5.3
Adaptive Technology Resource Centre Atutor	Version 1.5_rc_1