Lucene search
MitreCVE-2014-9752HistoryNov 16, 2015 - 7:59 p.m.
CVE-2014-9752
2015-11-1619:59:00
mitre
web.nvd.nist.gov
34
cve-2014-9752
atutor
file upload
vulnerability
php
nvd
security
patch
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7.5
Confidence
Low
EPSS
0.004
Percentile
74.1%
Unrestricted file upload vulnerability in mods/_core/properties/lib/course.inc.php in ATutor before 2.2 patch 6 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension as a customicon for a new course, then accessing it via a direct request to the file in content/.
Affected configurations
Node
atutoratutorRange≤2.2
Related
zdt
zdt
ATutor 2.2 File Upload Vulnerability
2015-11-05 00:00:00
prion
prion
Unrestricted file upload
2015-11-16 19:59:00
nvd
nvd
CVE-2014-9752
2015-11-16 19:59:00
cvelist
cvelist
CVE-2014-9752
2015-11-16 19:00:00
packetstorm
packetstorm
ATutor 2.2 File Upload
2015-11-04 00:00:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7.5
Confidence
Low
EPSS
0.004
Percentile
74.1%
Related for CVE-2014-9752