Security Advisory
CVE-2014-9753
9.8
CRITICAL
Vulnerability Description
confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing user via the auto_login parameter.
Published Date
February 11, 2020
Official Source
NIST NVD Advisory