CVE-2014-9752 in ATutor
要約 (英語)
Unrestricted file upload vulnerability in mods/_core/properties/lib/course.inc.php in ATutor before 2.2 patch 6 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension as a customicon for a new course, then accessing it via a direct request to the file in content/.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
予約する
2015年10月05日
公開
2015年11月16日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 79216 | ATutor File Upload course.inc.php 特権昇格 | 77 | 未定義 | 公式な修正 | CVE-2014-9752 |