CVE-2017-1000002
17.07.2017, 13:18
ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal and file extension check bypass in the Course component resulting in code execution. ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal vulnerability in the Course Icon component resulting in information disclosure.
| Vendor | Product | Version |
|---|---|---|
| atutor | atutor | 𝑥 ≤ 2.2.1 |
𝑥
= Vulnerable software versions
References