ATutor-Instructor-Backup-Arbitrary-File

ATutor-강사-백업-익스플로잇 익스플로잇 제목: ATutor 2.2.4 'Backup' 원격 명령 실행 CVE-2019-12170 Google Dork: inurl:/ATutor/login.php 날짜: 5/13/2019 익스플로잇 작성자: liquidsky Joseph McPeters 공급업체 홈페이지: https://atutor.github.io/ 소프트웨어 링크: https://sourceforge.net/projects/atutor/files/latest/download 버전: 2.2.4 버전 2.2.4 및 이전 버...

OSWE-Labs-Poc

OSWE - 실습 웹 전문가OSWE 인증을 위한 도커화된 실습 환경입니다. 다가오는 AWAE 교육을 위한 준비 ... 다른 프로젝트 : 악성코드 분석 및 사이버 위협 헌팅 https://github.com/svdwi/BlueBox OSWE를 위한 사용 가능한 실습 1. ATutor 는 오픈소스 웹 기반 학습 콘텐츠 관리 시스템입니다. Wikipedia 2. DNN 은 Microsoft .NET 기반의 웹 콘텐츠 관리 시스템 및 웹 애플리케이션 프레임워크입니다. ATutor 인증 우회 및 RCE 2.2.1 CVE-2016-255...

ATutor-2.2.4-Language-Exploit

ATutor 2.2.4 任意ファイルアップロード / RCE CVE-2019-12169 Exploit Title: ATutor 2.2.4 任意ファイルアップロード / RCE CVE-2019-12169 Date: 2019年5月24日 Exploit Author: liquidsky JMcPeters Vendor Homepage: https://atutor.github.io/ Software Link: https://sourceforge.net/projects/atutor/files/latest/download Version: 2.2.4...

ATutor < 2.2.1 - Cross Site Scripting

ATutor 2.2.1 was discovered with a vulnerability, a reflected cross-site scripting XSS, in ATtutor 2.2.1 via token body parameter. id: CVE-2023-27008 info: name: ATutor 2.2.1 - Cross Site Scripting author: r3Y3r53 severity: medium description: | ATutor 2.2.1 was discovered with a vulnerability, a...

CVE-2016-2555

CVE-2016-2555 익스플로잇 이 익스플로잇은 ATutor 2.2.1 의 SQL 인젝션 취약점 과 인증 약점 취약점 을 대상으로 합니다. 이러한 취약점을 악용하면 공격자는 악성 코드를 업로드하여 취약한 서버에서 원격 코드 실행RCE을 달성할 수 있습니다. 사용법 $ python3 CVE-2016-2555.py target:port 예시: $ python3 CVE-2016-2555.py 127.0.0.1:8080 기능 ATutor 2.2.1의 SQL 인젝션 취약점을 악용합니다. 인증을 우회하여 관리자 액세스 권한을 얻습니다...

atutor-blind-sqli

ATutor v2.2.1 블라인드 SQL 인젝션 CVE-2016-2555를 이용하여 기본 데이터베이스 열거 및 덤프. 면책 조항 이 게시물에서 제공되는 모든 정보는 교육 목적으로만 제공됩니다. 이 정보를 오용하여 무단 액세스를 얻거나 악성 프로그램을 작성해서는 안 됩니다. 저자는 이 정보의 오용에 대해 책임을 지지 않습니다...

CVE-2026-64972

ATutor is vulnerable to Reflected XSS via popup parameter in preview.php. An authenticated attacker can inject a double quote into the popup parameter, break out of the attribute value, and append a new event handler such as onload. The related previewtop.php file sanitises these parameters, but...

CVE-2026-64965

ATutor is vulnerable to Missing Authorization Check on Test and Question Import endpoints. A low-privileged authenticated user e.g. a student enrolled in a course can bypass authorization checks by sending requests directly to the backend import endpoints, allowing the unauthorized import of test...

CVE-2026-64966

ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An attacker with instructor privileges can upload and extract a specially crafted ZIP archive, causing files to be written outside the intended extraction directory. This allows an attacker to place a...

CVE-2026-64967

A path traversal vulnerability in ATutor's error log viewer allows an attacker with administrative privileges to access arbitrary files outside the intended logs directory. This can lead to unauthorized access to sensitive files and other resources accessible to the web server process. Product is...

CVE-2026-64968

ATutor is vulnerable to Server-Side request forgery in import functionalities. An authenticated administrator can make the server request arbitrary internal HTTP endpoints, cloud metadata services, or local files via file:// if the PHP environment permits URL wrappers. Product is no longer active...

CVE-2026-64970

ATutor is vulnerable to Stored Cross Site Scripting in registration functionality. An attacker can register a new account and enter a JavaScript payload in the phone field during registration. When any authenticated user visits the attacker's public profile, the profile template echoes the phone...

CVE-2026-64969

ATutor is vulnerable to Insecure Direct Object Reference IDOR attack in profile picture related endpoints. Any authenticated user, including a student, can supply another user's memberid in a POST request to the profile album endpoint and permanently delete that user's profile picture, including...

CVE-2026-64971

ATutor is vulnerable to Reflected XSS in restore functionality. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. Product is no longer actively supported and the vulnerabilities have not been fixed. Only version...

CVE-2026-64961

ATutor is vulnerable to authentication bypass . Although a token validation check is present in the auto-login functionality, the values required for token validation remain uninitialized in certain code paths. An unauthenticated attacker who can determine a user's identifier and registration...

CVE-2026-64962

ATutor is vulnerable to Cross-Site Request Forgery CSRF in profile update functionality. An attacker can craft a malicious website which, when visited by an authenticated victim, submits a forged request to the system. Due to the lack of proper CSRF token implementation, the forged request is...

CVE-2026-64963

A path traversal vulnerability in ATutor allows an authenticated user to access files from other course directories when the ATFORCEGETFILE configuration option is enabled. This can lead to unauthorized access to files and disclosure of information about the filesystem structure. Product is no...

CVE-2026-64960

ATutor Gameme module allows users to upload files of any type and extension without restriction. Due to improper handling of file uploads, files are stored in a web-accessible location before their content is validated. An authenticated attacker who knows a valid courseid can upload a...

CVE-2026-64964

ATutor generates predictable email confirmation tokens due to the use of insufficiently random values in the account confirmation functionality. Due to the use of predictable values related to user registration, an attacker who knows or can predict these values can guess valid account activation...

EUVD-2026-63373

ATutor is vulnerable to Reflected XSS via popup parameter in preview.php. An authenticated attacker can inject a double quote into the popup parameter, break out of the attribute value, and append a new event handler such as onload. The related previewtop.php file sanitises these parameters, but...