Vulnerability record · CVE-2005-3405 · published 1 November 2005
CVE-2005-3405: ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request…
ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum.inc.php with a modified addslashes parameter with either the (1) asc or (2) desc parameters set, possibly due to an eval injection vulnerability.
Description
ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum.inc.php with a modified addslashes parameter with either the (1) asc or (2) desc parameters set, possibly due to an eval injection vulnerability.
AV:N/AC:L/Au:N/C:P/I:P/A:P
References
| Link | Tags |
|---|---|
| http://marc.info/?l=bugtraq&m=113043022821049&w=2 | |
| http://secunia.com/advisories/16915/ | ExploitPatchVendor Advisory |
| http://secunia.com/secunia_research/2005-55/advisory/ | ExploitPatchVendor Advisory |
| http://securityreason.com/securityalert/123 | |
| http://securitytracker.com/id?1015165 | |
| http://www.osvdb.org/20344 | Patch |
| http://www.securityfocus.com/bid/15221 | ExploitPatch |
| http://www.vupen.com/english/advisories/2005/2228 | |
| http://marc.info/?l=bugtraq&m=113043022821049&w=2 | |
| http://secunia.com/advisories/16915/ | ExploitPatchVendor Advisory |
| http://secunia.com/secunia_research/2005-55/advisory/ | ExploitPatchVendor Advisory |
| http://securityreason.com/securityalert/123 | |
| http://securitytracker.com/id?1015165 | |
| http://www.osvdb.org/20344 | Patch |
| http://www.securityfocus.com/bid/15221 | ExploitPatch |
| http://www.vupen.com/english/advisories/2005/2228 |
Track CVE-2005-3405 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Source: NIST National Vulnerability Database (record CVE-2005-3405), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
