ATutor < 2.2.1 - Cross Site Scripting
ATutor < 2.2.1 was discovered with a vulnerability, a reflected cross-site scripting (XSS), in ATtutor 2.2.1 via token body parameter.
PoC 已收录ATutor
CVSS6.1EPSS 1.5%
ATutor is a free Open Source Web-based elearning environment designed with accessibility and adaptability in mind.
共找到 2 条公开漏洞记录
ATutor < 2.2.1 was discovered with a vulnerability, a reflected cross-site scripting (XSS), in ATtutor 2.2.1 via token body parameter.
ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code execution via a ".." pathname in a ZIP archive to the mods/_core/languages/language_import.php (aka Import New Language) or mods/_standard/patcher/index_admin.php (aka Patcher) component.