PT-2017-7896

Name of the Vulnerable Software and Affected Versions ATutor versions prior to 2.2.2 Description A Directory Traversal issue exists, allowing an attacker to read arbitrary files. This can be achieved by exploiting the icon parameter in the /mods/ core/courses/users/create course.php endpoint, and...