CVE-2012-5454: Atutor Acontent

Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days.

user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access, which allows remote authenticated users to modify arbitrary user passwords via a crafted request. NOTE: this might be due to an incomplete fix for CVE-2012-5168.

Affected products

• Atutor Acontent: version 1.2 only

Published 2012-10-22. Last modified 2026-06-16.