Security Advisory

CVE-2005-3404

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-11-01 11:00:00

Last updated 2024-08-07 23:10:08

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrary files via the section parameter followed by a null byte (%00) in (1) body_header.inc.php and (2) print.php.

← Browse all CVEs View on cve.org ↗