U.S. Dept Of Defense: [hta3] Remote Code Execution on https://███ via improper access control to SCORM Zip upload/import

Summary: There is a Remote Code Execution vulnerability at https://█████████/Kview/CustomCodeBehind/base/courseware/scorm/management/scorm2004uploadcourse.aspx which allows any user to upload a SCORM course package. Furthermore, an attacker can add an ASPX shell to the SCORM package which will th...