Description
ATutor是ATutor团队的一套开源的基于Web的学习内容管理系统（LCMS）。该系统包括教学内容管理、论坛、聊天室等模块。
ATutor学习内容管理系统 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnblogs.com/0daybug/p/12848726.html
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/ATutor/%EF%BC%88CVE-2019-12169%EF%BC%89ATutor%E5%AD%A6%E4%B9%A0%E5%86%85%E5%AE%B9%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E/
https://zone.ci/aliyun/ali_highrisk/12038.html
https://avd.aliyun.com/detail?id=AVD-2019-12169
https://nvd.nist.gov/vuln/detail/CVE-2019-12169
https://www.acunetix.com/vulnerabilities/web/atutor-unrestricted-upload-of-file-with-dangerous-type-vulnerability-cve-2019-12169/
https://github.com/advisories/GHSA-5j39-8xgf-g676
https://www.cvedetails.com/cve/CVE-2019-12169/
https://www.rapid7.com/db/modules/exploit/multi/http/atutor_upload_traversal/