Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2019-12169
HistoryJun 03, 2019 - 8:29 p.m.

CVE-2019-12169

2019-06-0320:29:00
CWE-22
mitre
web.nvd.nist.gov
125
atutor
arbitrary file upload
directory traversal
remote code execution
cve-2019-12169
nvd
security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.716

Percentile

98.1%

JSON

ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code execution via a “…” pathname in a ZIP archive to the mods/_core/languages/language_import.php (aka Import New Language) or mods/_standard/patcher/index_admin.php (aka Patcher) component.

Affected configurations

Nvd
Node
atutoratutorRange2.2.1–2.2.4
VendorProductVersionCPE
atutoratutor*cpe:2.3:a:atutor:atutor:*:*:*:*:*:*:*:*

Related

zdt 2
0daydb 3
packetstorm 2
metasploit 1
prion 1
cvelist 1
osv 1
nvd 1
githubexploit 2
zdt
zdt
ATutor 2.2.4 Arbitrary File Upload / Command Execution Exploit
2019-08-06 00:00:00
ATutor 2.2.4 Directory Traversal / Remote Code Execution Exploit
2020-06-30 00:00:00
0daydb
0daydb
ATutor 2.2.4 CVE-2019-12169 - Remote Code Execution
2020-07-02 15:41:43
FTPShell Server 6.90 - Buffer Overflow
2020-07-02 15:44:35
Inductive Automation Ignition - Remote Code Execution
2020-06-28 01:09:34
packetstorm
packetstorm
ATutor 2.2.4 Directory Traversal / Remote Code Execution
2020-06-30 00:00:00
ATutor 2.2.4 Arbitrary File Upload / Command Execution
2019-08-05 00:00:00
metasploit
metasploit
ATutor 2.2.4 - Directory Traversal / Remote Code Execution,
2020-06-12 20:02:00
prion
prion
Directory traversal
2019-06-03 20:29:00
cvelist
cvelist
CVE-2019-12169
2019-06-03 20:00:28
osv
osv
CVE-2019-12169
2019-06-03 20:29:00
nvd
nvd
CVE-2019-12169
2019-06-03 20:29:00
githubexploit
githubexploit
Exploit for Path Traversal in Atutor
2019-05-24 05:15:17
Exploit for Unrestricted Upload of File with Dangerous Type in Atutor
2019-05-13 06:01:47

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.716

Percentile

98.1%

JSON
Related for CVE-2019-12169
zdt20daydb3packetstorm2metasploit1prion1cvelist1osv1nvd1githubexploit2