EUVD-2017-1340

Malware in sbrugna...

CVE-2017-1000002: Improper Limitation of a Pathname to a Restricted Directory

ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal and file extension check bypass in the Course component resulting in code execution. ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal vulnerability in the Course Icon component resulting in...

CVE-2017-1000002

ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal and file extension check bypass in the Course component resulting in code execution. ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal vulnerability in the Course Icon component resulting in...

PT-2017-10713

Name of the Vulnerable Software and Affected Versions ATutor versions 2.2.1 and earlier Description The issue concerns a directory traversal and file extension check bypass in the Course component, which can result in code execution. Additionally, there is a directory traversal vulnerability in t...