CVE-2005-2044

The provided text describes multiple XSS vulnerabilities in ATutor due to improper input sanitization. It includes example URLs demonstrating how arbitrary script code can be executed in a user's browser context.

The provided text describes a cross-site scripting (XSS) vulnerability in ATutor, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code via the 'us' parameter.

The provided text describes a cross-site scripting (XSS) vulnerability in ATutor, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code into the 'l' parameter of the send_message.php page.

This exploit demonstrates multiple XSS vulnerabilities in ATutor by injecting arbitrary script code into various parameters of the search.php page. The PoC provides specific URLs with injection points marked as [XSS-CODE].

This exploit demonstrates multiple XSS vulnerabilities in ATutor by injecting arbitrary script code into the 'roles' and 'status' parameters of the 'directory.php' page. The PoC provides specific URLs with injection points marked as [XSS-CODE].

The provided text describes a cross-site scripting (XSS) vulnerability in ATutor, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code into the 'cid' parameter.

The provided text describes a cross-site scripting (XSS) vulnerability in ATutor, where user-supplied input is not properly sanitized. The example demonstrates how an attacker could inject arbitrary script code via the 'subject' parameter in the contact.php page.

The provided text describes a cross-site scripting (XSS) vulnerability in ATutor, where user-supplied input is not properly sanitized. It includes an example URL demonstrating how arbitrary script code could be executed in the context of the affected site.

The provided text describes a cross-site scripting (XSS) vulnerability in ATutor, where user-supplied input is not properly sanitized. The example URL demonstrates how an attacker could inject arbitrary script code into the 'view' parameter.