VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 11, 2005· Updated Jun 16, 2026

CVE-2005-4155

CVE-2005-4155

Description

registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address that ends in a NULL character, which bypasses the PHP regular expression check. NOTE: it is possible that this is actually a bug in PHP code, in which case this should not be treated as a vulnerability in ATutor.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Atutor/Atutor2 versions
    cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1_pl2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:adaptive_technology_resource_centre:atutor:1.5.1_pl2:*:*:*:*:*:*:*
    • (no CPE)range: =1.5.1 pl2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.