Description

PHP remote file inclusion vulnerability in tools/packages/import.php in ATutor 1.6.1 pl1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via a URL in the type parameter.

Remediation

References

CVE-2008-3368

Related Vulnerabilities

WordPress Plugin Custom Simple Rss Cross-Site Request Forgery (2.0.6)

OpenSSL Improper Input Validation Vulnerability (CVE-2016-6302)

PostgreSQL Other Vulnerability (CVE-2005-1409)

WordPress Plugin iThemes Security (formerly Better WP Security) Multiple Cross-Site Scripting Vulnerabilities (3.4.3)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9031)

Severity

Medium

Classification

CVE-2008-3368 CWE-94

Tags

Missing Update Known Vulnerabilities