Description

PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter.

Remediation

References

CVE-2008-3368

Related Vulnerabilities

XWiki Incorrect Authorization Vulnerability (CVE-2023-32069)

MySQL CVE-2018-2773 Vulnerability (CVE-2018-2773)

ownCloud Credentials Management Errors Vulnerability (CVE-2012-5607)

Oracle Application Server CVE-2006-0435 Vulnerability (CVE-2006-0435)

WordPress Plugin Private Only Multiple Vulnerabilities (3.5.1)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-94 CVE-2008-3368