Test ID:	1.3.6.1.4.1.25623.1.0.20095
Category:	Web application abuses
Title:	ATutor < 1.5.1-pl1 Multiple Flaws
Summary:	The remote web server contains a PHP application that is prone to multiple; flaws.;; The remote host is running ATutor, an open-source web-based Learning; Content Management System (LCMS) written in PHP.;; The version of ATutor installed on the remote host may be vulnerable; to arbitrary command execution, arbitrary file access, and cross-site; scripting attacks. Successful exploitation of the first two issues; requires that PHP's 'register_globals' setting be enabled and, in some; cases, that 'magic_quotes_gpc' be disabled.
Description:	Summary: The remote web server contains a PHP application that is prone to multiple flaws. The remote host is running ATutor, an open-source web-based Learning Content Management System (LCMS) written in PHP. The version of ATutor installed on the remote host may be vulnerable to arbitrary command execution, arbitrary file access, and cross-site scripting attacks. Successful exploitation of the first two issues requires that PHP's 'register_globals' setting be enabled and, in some cases, that 'magic_quotes_gpc' be disabled. Solution: Apply patch 1.5.1-pl1 or upgrade to version 1.5.2 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3403 BugTraq ID: 15221 http://www.securityfocus.com/bid/15221 Bugtraq: 20051027 Secunia Research: ATutor Multiple Vulnerabilities (Google Search) http://marc.info/?l=bugtraq&m=113043022821049&w=2 http://secunia.com/secunia_research/2005-55/advisory/ http://www.osvdb.org/20347 http://www.osvdb.org/20348 http://www.osvdb.org/20349 http://securitytracker.com/id?1015165 http://secunia.com/advisories/16915/ http://securityreason.com/securityalert/123 http://www.vupen.com/english/advisories/2005/2228 Common Vulnerability Exposure (CVE) ID: CVE-2005-3404 http://www.osvdb.org/20345 http://www.osvdb.org/20346 Common Vulnerability Exposure (CVE) ID: CVE-2005-3405 http://www.osvdb.org/20344
Copyright	Copyright (C) 2005 David Maciejak

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.