CVE-2012-5167: Atutor Acontent

High severity, CVSS 7.5. EPSS: 4.7% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in ATutor AContent before 1.2-1 allow remote attackers to execute arbitrary SQL commands via the (1) field parameter to course_category/index_inline_editor_submit.php or (2) user/index_inline_editor_submit.php; or (3) id parameter to user/user_password.php.

Affected products

• Atutor Acontent: up to and including 1.2

Published 2012-10-22. Last modified 2026-06-16.