CVE-2012-5454

user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access, which allows remote authenticated users to modify arbitrary…

published October 22, 2012

CVSS
—
EPSS
2%
Percentile
80.8
In the wild
Unconfirmed
What it is

user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access, which allows remote authenticated users to modify arbitrary user passwords via a crafted request. NOTE: this might be due to an incomplete fix for CVE-2012-5168.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02029 · 80.8th percentile
Published
2012-10-22T23:00Z
EPSS history
Timeline
  • 22 OCT 23:00Z
    user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access, which allows remote authenticated users to modify arbitrary…
    cvelistv5