Description
confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing user via the auto_login parameter.
Remediation
References
Related Vulnerabilities
VirtueMart access control bypass
Zikula Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-2293)
WordPress Plugin Salon Booking System Cross-Site Scripting (7.9.3)
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-1455)
WordPress Plugin WooCommerce Arbitrary File Deletion (3.4.5)