CVE-2005-2955

config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which allows authenticated…

published September 16, 2005

CVSS
—
EPSS
1%
Percentile
55.1
In the wild
Unconfirmed
What it is

config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which allows authenticated administrators or educators to execute arbitrary code by uploading files with other executable extensions such as .inc, .php4, or others.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00777 · 55.1th percentile
Published
2005-09-16T04:00Z
EPSS history
Timeline
  • 16 SEP 04:00Z
    config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which allows authenticated…
    cvelistv5