CVE-2005-2955: Medium severity adaptive technology resource centre atutor vulnerability
config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which allows authenticated administrators or educators to execute arbitrary code by uploading files with other executable extensions such as .inc, .php4, or others.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2955?
CVE-2005-2955 has a medium severity rating due to the potential for authenticated users to execute arbitrary code.
How do I fix CVE-2005-2955?
To fix CVE-2005-2955, upgrade to a patched version of ATutor that properly validates file uploads.
Who is affected by CVE-2005-2955?
CVE-2005-2955 affects installations of ATutor version 1.5.1 and possibly earlier versions.
What are the consequences of CVE-2005-2955?
The main consequence of CVE-2005-2955 is the potential for an attacker to gain unauthorized access to execute malicious code on the server.
Can CVE-2005-2955 impact the security of my system?
Yes, CVE-2005-2955 can significantly impact the security of your system by allowing uploading of files with executable code.