| Package | Affected versions | Patched versions |
|---|---|---|
| atutor | = 0.9.6= 0.9.7= 1.0= 1.2.1= 1.2.2= 1.3= 1.3.1= 1.3.2= 1.3.3= 1.4= 1.4.1= 1.4.2= 1.4.3= 1.5.1= 1.5.2= 1.5.3= 1.5.3.1= 1.5.3.2= 1.5.4= 1.5.5= 1.6≤ 1.6.1 |
PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free