CVE-2017-1000002

Name of the Vulnerable Software and Affected Versions ATutor versions 2.2.1 and earlier

Description The issue concerns a directory traversal and file extension check bypass in the Course component, which can result in code execution. Additionally, there is a directory traversal vulnerability in the Course Icon component, leading to information disclosure.

Recommendations For versions 2.2.1 and earlier, update to a version that addresses these issues to prevent directory traversal and code execution vulnerabilities. As a temporary workaround, consider restricting access to the Course and Course Icon components until a patch is available.