CVE-2014-9752 in ATutor
Сводка (Английский)
Unrestricted file upload vulnerability in mods/_core/properties/lib/course.inc.php in ATutor before 2.2 patch 6 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension as a customicon for a new course, then accessing it via a direct request to the file in content/.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Резервировать
05.10.2015
Раскрытие
16.11.2015
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 79216 | ATutor File Upload course.inc.php эскалация привилегий | 77 | Не определено | Официальное исправление | CVE-2014-9752 |