What’s Vulnerable › Vulnerabilities

CVE-2005-2956

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-09-16 · updated 2026-06-16

Description

ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain user chat conversations via direct requests to those files.

Affected products

• Adaptive Technology Resource Centre Atutor: 1.5.1

References

• http://marc.info/?l=bugtraq&m=112671176100432&w=2
• http://rgod.altervista.org/atutor151.html
• http://securityreason.com/securityalert/9
• http://www.securityfocus.com/bid/14832
• http://marc.info/?l=bugtraq&m=112671176100432&w=2
• http://rgod.altervista.org/atutor151.html
• http://securityreason.com/securityalert/9
• http://www.securityfocus.com/bid/14832

Get alerted when CVE-2005-2956 or the next vulnerability affects your stack