CVE-2015-7712 in ATutor

Resumen (Inglés)

Multiple eval injection vulnerabilities in mods/_standard/gradebook/edit_marks.php in ATutor 2.2 and earlier allow remote authenticated users with the AT_PRIV_GRADEBOOK privilege to execute arbitrary PHP code via the (1) asc or (2) desc parameter.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2015-10-05

Divulgación

2015-11-16

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
79220	ATutor edit_marks.php Eval escalada de privilegios	269	No está definido	No está definido	CVE-2015-7712

Fuentes

• MITRE
• NVD
• CVE Details