Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
ATutor Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2017-1000002 - Vulnerability Database
ATutor

ATutor Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2017-1000002

Critical
Reference: CVE-2017-1000002
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-1000002
Title: ATutor Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability
Overview:

ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal and file extension check bypass in the Course component resulting in code execution. ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal vulnerability in the Course Icon component resulting in information disclosure.