High severity8.8NVD Advisory· Published Mar 2, 2020· Updated Jun 17, 2026
CVE-2015-1583
CVE-2015-1583
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator account via a request to mods/_core/users/admins/create.php or (2) create a user account via a request to mods/_core/users/create_user.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- ATutor/ATutordescription
Patches
Vulnerability mechanics
References
6- github.com/atutor/ATutor/commit/068b8aa37f24645c62235018fb8da340f60e2d18nvdPatchThird Party Advisory
- github.com/atutor/ATutor/commit/0ee827317e497f1db86ddc5080b8af461e4595cenvdPatchThird Party Advisory
- github.com/atutor/ATutor/commit/af519cfb56da7312eecbb5812484fcbce08e4419nvdPatchThird Party Advisory
- packetstormsecurity.com/files/130598/ATutor-LCMS-2.2-Cross-Site-Request-Forgery.htmlnvdExploitThird Party AdvisoryVDB Entry
- edricteo.com/cve-2015-1583-atutor-lcms-csrf-vulnerability/nvdExploitThird Party Advisory
- www.securityfocus.com/bid/72845nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.