Vulnerabilities > CVE-2015-7712 - Unspecified vulnerability in Atutor
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Multiple eval injection vulnerabilities in mods/_standard/gradebook/edit_marks.php in ATutor 2.2 and earlier allow remote authenticated users with the AT_PRIV_GRADEBOOK privilege to execute arbitrary PHP code via the (1) asc or (2) desc parameter.
Vulnerable Configurations
Packetstorm
| data source | https://packetstormsecurity.com/files/download/134218/KIS-2015-08.txt |
| id | PACKETSTORM:134218 |
| last seen | 2016-12-05 |
| published | 2015-11-04 |
| reporter | EgiX |
| source | https://packetstormsecurity.com/files/134218/ATutor-2.2-PHP-Code-Injection.html |
| title | ATutor 2.2 PHP Code Injection |
References
- http://karmainsecurity.com/KIS-2015-08
- http://karmainsecurity.com/KIS-2015-08
- http://packetstormsecurity.com/files/134218/ATutor-2.2-PHP-Code-Injection.html
- http://packetstormsecurity.com/files/134218/ATutor-2.2-PHP-Code-Injection.html
- http://seclists.org/fulldisclosure/2015/Nov/13
- http://seclists.org/fulldisclosure/2015/Nov/13
- http://www.securityfocus.com/archive/1/536836/100/0/threaded
- http://www.securityfocus.com/archive/1/536836/100/0/threaded