Adaptive Technology Resource Centre maintains ATutor, a learning management system designed for accessible educational environments. The vendor's disclosure footprint is marked by a distinctive characteristic: vulnerabilities frequently acquire public exploit code, reflecting the product's role as an internet-facing educational platform where proof-of-concept availability enables both assessment and remediation across deployed instances. Live severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Adaptive Technology Resource Centre over time
Signals from CVEs in this vendor scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2005-3404HIGH Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrary files via the section parameter followed by a null byte (% | Nov 1, 2005 | 7.5 | 32 | NO | YES |
CVE-2005-4155HIGH registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address that ends in a NULL character, which bypasses the PHP regular e | Dec 11, 2005 | 7.5 | 29 | NO | YES |
CVE-2006-3662HIGH SQL injection vulnerability in index.php in ATutor 1.5.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter. NOTE: this issue has been disputed by the | Jul 18, 2006 | 7.5 | 28 | NO | YES |
CVE-2005-2954HIGH SQL injection vulnerability in password_reminder.php in ATutor before 1.5.1 pl1 allows remote attackers to execute arbitrary SQL commands via the email field. | Sep 16, 2005 | 7.5 | 28 | NO | YES |
CVE-2006-3996MEDIUM SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) desc or (2) asc paramet | Aug 5, 2006 | 6.5 | 26 | NO | YES |
CVE-2005-2956MEDIUM ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and predictable filenames, which allows remote | Sep 16, 2005 | 5.0 | 23 | NO | YES |
CVE-2005-2649MEDIUM Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML via (1) course parameter in login.php or (2) words parameter | Aug 23, 2005 | 4.3 | 22 | NO | YES |
CVE-2005-2044MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitrary web script or HTML via the (1) show_course parameter to | Jun 16, 2005 | 4.3 | 22 | NO | YES |
CVE-2007-0381HIGH Multiple SQL injection vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters. NOTE: CVE analysis suggests that the | Jan 19, 2007 | 7.5 | 19 | NO | NO |
CVE-2006-5734HIGH Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) section parameter in (a) documentatio | Nov 6, 2006 | 7.5 | 19 | NO | NO |
Signals from CVEs in this vendor scope (14 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Adaptive Technology Resource Centre.
Media articles that mention a CVE ID that affects a product developed by Adaptive Technology Resource Centre — matched by CVE ID, not by vendor name.