CVE-2017-1000004

ATutor version 2.2.1 and earlier are vulnerable to a SQL injection in the Assignment Dropbox, BasicLTI, Blog Post, Blog, Group Course Email, Course Alumni, Course Enrolment, Group Membership, Course unenrolment, Course Enrolment List Search, Glossary, Social Group Member Search, Social Friend Search, Social Group Search, File Comment, Gradebook Test Title, User Group Membership, Inbox/Sent Items, Sent Messages, Links, Photo Album, Poll, Social Application, Social Profile, Test, Content Menu, Auto-Login, and Gradebook components resulting in information disclosure, database modification, or potential code execution.

• CWE-89

• http://www.atutor.ca/atutor/mantis/changelog_page.php?version_id=55Vendor Advisory
• http://www.atutor.ca/atutor/mantis/view.php?id=5681Permissions Required
• http://www.securityfocus.com/bid/99599Third Party Advisory, VDB Entry
• http://www.atutor.ca/atutor/mantis/changelog_page.php?version_id=55Vendor Advisory
• http://www.atutor.ca/atutor/mantis/view.php?id=5681Permissions Required
• http://www.securityfocus.com/bid/99599Third Party Advisory, VDB Entry

Published

Jul 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10000Vulnerability in the Oracle Hospitality Reporting and Analyt…
• CVE-2017-1000000Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000001FedMsg 0.18.1 and older is vulnerable to a message validatio…
• CVE-2017-1000002ATutor versions 2.2.1 and earlier are vulnerable to a direct…
• CVE-2017-1000003ATutor versions 2.2.1 and earlier are vulnerable to an incor…
• CVE-2017-1000005PHPMiniAdmin version 1.9.160630 is vulnerable to stored XSS …
• CVE-2017-1000006Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerab…
• CVE-2017-1000007txAWS (all current versions) fail to perform complete certif…
• CVE-2017-1000008Chyrp Lite version 2016.04 is vulnerable to a CSRF in the us…
• CVE-2017-1000009Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable…9.8
• CVE-2017-1000010Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking …7.8