CVE-2005-2956 | BDVDB-2026-12494 Detail

Description#

ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain user chat conversations via direct requests to those files.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12005-09-16Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.