CVE-2012-5454: user/index_inline_editor_submit.php in ATutor AContent 1.2-1 does not properly restrict access, which allow...

Security readout for executives and security teams

An authenticated user of ATutor AContent 1.2-1 could change other users’ passwords because an inline editor endpoint did not properly enforce access controls. For an organization still running this old product, the business risk is account takeover and loss of administrative control. Exposure appears limited to ATutor AContent 1.2-1 deployments where authenticated users can reach the vulnerable endpoint. The source bundle does not identify broader affected versions or CPEs. Prioritize remediation if AContent is still deployed. The product version is old, and arbitrary password modification can directly enable account takeover despite requiring authentication. Mitigation focus: Check ATutor or HTBridge guidance for an official fixed release or patch.; Upgrade or retire affected AContent 1.2-1 installations where feasible.; Restrict access to the application to trusted users and networks..

Prepared

Jun 24, 2026, 19:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.