CVE-2012-5453: Atutor Acontent

Medium severity, CVSS 6.5. EPSS: 2.7% chance of exploitation in the next 30 days.

SQL injection vulnerability in user/index_inline_editor_submit.php in ATutor AContent 1.2-1 allows remote authenticated users to execute arbitrary SQL commands via the field parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-5167.

Affected products

• Atutor Acontent: version 1.2 only

Published 2012-10-22. Last modified 2026-06-16.