CVE-2005-3404

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

10.32%

Published

Nov 1, 2005

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBATutor 1.x - 'body_header.inc.php?section' Local File Inclusion Exploit-DBATutor 1.x - 'print.php?section' Remote File Inclusion

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrary files via the section parameter followed by a null byte (%00) in (1) body_header.inc.php and (2) print.php.

Affected Products (5)

adaptive_technology_resource_centre · atutorvulnerable

References (18)

http://marc.info/?l=bugtraq&m=113043022821049&w=2

http://secunia.com/advisories/16915/

ExploitPatchVendor Advisory

http://secunia.com/secunia_research/2005-55/advisory/

ExploitPatchVendor Advisory

http://securityreason.com/securityalert/123

http://securitytracker.com/id?1015165

http://www.osvdb.org/20345

Patch

http://www.osvdb.org/20346

Patch

http://www.securityfocus.com/bid/15221

ExploitPatch

http://www.vupen.com/english/advisories/2005/2228

http://marc.info/?l=bugtraq&m=113043022821049&w=2

http://secunia.com/advisories/16915/

ExploitPatchVendor Advisory

http://secunia.com/secunia_research/2005-55/advisory/

ExploitPatchVendor Advisory

http://securityreason.com/securityalert/123

http://securitytracker.com/id?1015165

http://www.osvdb.org/20345

Patch

http://www.osvdb.org/20346

Patch

http://www.securityfocus.com/bid/15221

ExploitPatch

http://www.vupen.com/english/advisories/2005/2228

KEV Catalog EPSS Scores Vendors All CVEs