CVE-2005-2955 - CVE House
Back to Database
Status published Medium CVE-2005-2955

config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an...

Vulnerability Description

config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which allows authenticated administrators or educators to execute arbitrary code by uploading files with other executable extensions such as .inc, .php4, or others.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2955

Credits & Attribution

No credits recorded in the NVD database.

References

More from adaptive technology resource centre

View All →
CVE-2007-0381
Multiple SQL injection vulnerabilities in ATutor 1.5.3.2 allow remote attackers...
High 7.5
CVE-2006-5734
Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow...
High 7.5
CVE-2006-3996
SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier...
Medium 6.5
CVE-2006-3821
Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.3 allow remote...
Medium 4.3
CVE-2006-3662
SQL injection vulnerability in index.php in ATutor 1.5.3 allows remote...
High 7.5

Affected Vendor

adaptive technology resource centre

View all reports →

Affected Software

atutor
Vulnerable Versions:
1.5.1

Timeline

Official Publish: September 16th, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.