This host is running Atutor and is prone to multiple cross site scripting vulnerabilities.

Successful exploitation will allow attackers to execute arbitrary web script or HTML in a user's browser session in the context of an affected site. Impact Level: Application

Update to ATutor Version 2.1 For updates refer to http://atutor.ca/atutor/change_log.php

Multiple flaws are due to an input passed to the various pages are not properly sanitised before being returned to the user.

ATutor version 2.0.3

• http://packetstormsecurity.org/files/108706/SSCHADV2012-002.txt
• http://www.securityfocus.com/archive/1/521260
• http://www.securityfocus.com/bid/51423/info

---

Updated on 2015-03-25