Showing 1 - 2 of 2

CVE-2019-12169

Status Candidate

Overview

ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code execution via a ".." pathname in a ZIP archive to the mods/_core/languages/language_import.php (aka Import New Language) or mods/_standard/patcher/index_admin.php (aka Patcher) component.

Related Files

ATutor 2.2.4 Directory Traversal / Remote Code Execution: Posted Jun 30, 2020; Authored by liquidsky, Erik Wynter | Site metasploit.com; This Metasploit module exploits an arbitrary file upload vulnerability together with a directory traversal flaw in ATutor versions 2.2.4, 2.2.2 and 2.2.1 in order to execute arbitrary commands.; tags | exploit, arbitrary, file upload; advisories | CVE-2019-12169; SHA-256 | 344a78946baa67ebb531073dad88904763b7f86e0bf52c4f8197e8fc0c0f179d; Download | Favorite | View

ATutor 2.2.4 Arbitrary File Upload / Command Execution: Posted Aug 5, 2019; Authored by liquidsky; ATutor version 2.2.4 suffers from a language_import arbitrary file upload that allows for command execution.; tags | exploit, arbitrary, file upload; advisories | CVE-2019-12169; SHA-256 | 68b1f5ef4f43ce98748eca51235dfb77dab8a8340683912b52e996264a98eec7; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 221 files
Ubuntu 59 files
Debian 30 files
LiquidWorm 11 files
Valentin Lobstein 11 files
nu11secur1ty 9 files
Apple 6 files
Milad Karimi 5 files
Google Security Research 5 files
tmrswrr 4 files

File Archives

Systems

AIX (429)
Apple (2,078)
BSD (376)
CentOS (58)
Cisco (1,927)
Debian (7,022)
Fedora (1,693)
FreeBSD (1,246)
Gentoo (4,467)
HPUX (880)
iOS (373)
iPhone (108)
IRIX (220)
Juniper (69)
Linux (49,298)
Mac OS X (691)
Mandriva (3,105)
NetBSD (256)
OpenBSD (488)
RedHat (15,550)
Slackware (941)
Solaris (1,611)
SUSE (1,444)
Ubuntu (9,453)
UNIX (9,394)
UnixWare (187)
Windows (6,650)
Other

CVE-2019-12169

Overview

Related Files

File Archive:

April 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems