Skip to content
OpenAdvisories

Vendor

ATutor

16 known vulnerabilities.

Products

ATutor 16
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.7
    CVE-2026-64966

    Path Traversal leading to Remote Code Execution in ATutor

    ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An attacker with instructor privileges can upload and extract a specially crafted ZIP archive, causing files to be written outside the intended extraction directory. This …

    ATutor ATutor
  • High 8.7
    CVE-2026-64960

    Remote Code Execution via Unrestricted File Upload in ATutor

    ATutor Gameme module allows users to upload files of any type and extension without restriction. Due to improper handling of file uploads, files are stored in a web-accessible location before their content is validated. An authenticated attacker who knows a v…

    ATutor ATutor
  • High 7.1
    CVE-2020-37147

    ATutor 2.2.4 - 'id' SQL Injection

    ATutor 2.2.4 contains a SQL injection vulnerability in the admin user deletion page that allows authenticated attackers to manipulate database queries through the 'id' parameter. Attackers can exploit the vulnerability by injecting malicious SQL code into the…

    ATutor ATutor