← Database

CVE-2006-3996

MEDIUM CVSS: 6.5 Published: 2006-08-05 Modified: 2026-06-16

Description

SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) desc or (2) asc parameters.

Affected Platforms

Adaptive Technology Resource Centre Atutor

Weakness Type

NVD-CWE-Other

References