Adaptive Technology Resource Centre ATutor 1.5.3.2 lang_path file inclusion

Summaryinfo

A vulnerability has been found in Adaptive Technology Resource Centre ATutor 1.5.3.2 and classified as critical. The affected element is an unknown function. This manipulation of the argument lang_path causes file inclusion. This vulnerability is tracked as CVE-2006-5734. No exploit exists.

Detailsinfo

A vulnerability was found in Adaptive Technology Resource Centre ATutor 1.5.3.2 (Learning Management Software). It has been declared as critical. Affected by this vulnerability is an unknown part. The manipulation of the argument lang_path with an unknown input leads to a file inclusion vulnerability. The CWE definition for the vulnerability is CWE-73. The product allows user input to control or influence paths or file names that are used in filesystem operations. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) section parameter in (a) documentation/common/frame_toc.php and (b) documentation/common/search.php, the (2) req_lang parameter in documentation/common/search.php and (c) documentation/common/vitals.inc.php, the (3) row[dir_name] parameter in (d) include/classes/module/module.class.php, and the (4) lang_path parameter in (e) include/classes/phpmailer/class.phpmailer.php. NOTE: the print.php vector is already covered by CVE-2005-3404.

The weakness was disclosed 11/06/2006 as not defined posting (Bugtraq). It is possible to read the advisory at securityfocus.com. This vulnerability is known as CVE-2006-5734 since 11/06/2006. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details of the vulnerability are known, but there is no available exploit.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at X-Force (29693) and SecurityFocus (BID 20634†). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Learning Management Software

Vendor

• Adaptive Technology Resource Centre

Name

• ATutor

Version

• 1.5.3.2

License

• free

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion