Published: 02/03/2020 Updated: 04/03/2020
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote malicious users to hijack the authentication of administrators for requests that (1) create an administrator account via a request to mods/_core/users/admins/create.php or (2) create a user account via a request to mods/_core/users/create_user.php.

Vulnerability Trend

Affected Products

Vendor Product Versions

Mailing Lists

ATutor LCMS version 22 suffers from a cross site request forgery vulnerability ...