ATutor 'documentation/index.php' URL Handling Phishing Vulnerability
BID:35129
Info
ATutor 'documentation/index.php' URL Handling Phishing Vulnerability
| Bugtraq ID: | 35129 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 28 2009 12:00AM |
| Updated: | May 28 2009 05:40PM |
| Credit: | Russ McRee, HolisticInfoSec |
| Vulnerable: |
ATutor ATutor 1.6.2 |
| Not Vulnerable: | |
Discussion
ATutor 'documentation/index.php' URL Handling Phishing Vulnerability
ATutor is prone to a vulnerability that can aid in phishing attacks.
Successful exploits may allow attackers to redirect victims to a malicious website. This may lead to other attacks.
ATutor 1.6.2 is vulnerable; other versions may also be affected.
ATutor is prone to a vulnerability that can aid in phishing attacks.
Successful exploits may allow attackers to redirect victims to a malicious website. This may lead to other attacks.
ATutor 1.6.2 is vulnerable; other versions may also be affected.
Exploit / POC
ATutor 'documentation/index.php' URL Handling Phishing Vulnerability
Attackers can exploit this issue by tricking an unsuspecting victim into following a malicious URI.
Attackers can exploit this issue by tricking an unsuspecting victim into following a malicious URI.
Solution / Fix
ATutor 'documentation/index.php' URL Handling Phishing Vulnerability
Solution:
The vendor has released a fix. Please see the references for details.
Solution:
The vendor has released a fix. Please see the references for details.
References
ATutor 'documentation/index.php' URL Handling Phishing Vulnerability
References:
References:
- ATutor Homepage (ATutor)
- Revision 8490 (ATutor)