Description
PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter.
Remediation
References
Related Vulnerabilities
MySQL CVE-2018-2784 Vulnerability (CVE-2018-2784)
e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-6433)
WordPress Plugin WP Hotel Booking Cross-Site Request Forgery (1.10.1)
WordPress Ultimate Member Plugin Improper Privilege Management Vulnerability (CVE-2020-36155)
WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Cross-Site Request Forgery (4.0.9)