ATutor versions 2.2.1 and previous versions are vulnerable to a directory traversal and file extension check bypass in the Course component resulting in code execution. ATutor versions 2.2.1 and previous versions are vulnerable to a directory traversal vulnerability in the Course Icon component resulting in information disclosure.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
atutor atutor |
Vulmon