CVE-2006-3996: Adaptive Technology Resource Centre Atutor

Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) desc or (2) asc parameters.

Affected products

• Adaptive Technology Resource Centre Atutor: up to and including 1.5.3.1

Published 2006-08-05. Last modified 2026-06-16.