CVE-2010-3455

Description

Cross-site scripting (XSS) vulnerability in index.php in AChecker 1.0 allows remote attackers to inject arbitrary web script or HTML via the uri parameter.

Affected products

• ATutor / achecker1.0 – 1.0

References

• VENDOR_ADVISORYhttp://secunia.com/advisories/41467
• EXPLOIThttp://packetstormsecurity.org/1009-exploits/achecker-xss.txt
• MISChttp://www.securityfocus.com/archive/1/513735/100/0/threaded
• MISChttp://www.htbridge.ch/advisory/xss_vulnerability_in_achecker.html