CVE-2012-5454 | BDVDB-2026-53178 Detail

Description#

user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access, which allows remote authenticated users to modify arbitrary user passwords via a crafted request. NOTE: this might be due to an incomplete fix for CVE-2012-5168.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/86428
http://www.securityfocus.com/bid/56237
http://secunia.com/advisories/51034
https://www.htbridge.com/advisory/HTB23117

Exploit#

No public exploit known

History#

Version 12012-10-22Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.