CVE-2017-1000002
30Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 31%
from disclosure to weapon0 days
Published on NVDJul 13
metasploitMar 1
exploitation probability
31%top 2% of all CVEs
observed exploitation
nono source reports it
ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal and file extension check bypass in the Course component resulting in code execution. ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal vulnerability in the Course Icon component resulting in information disclosure.
Affected products
n/a · n/a