CVE-2015-7712: Atutor

Medium severity, CVSS 6.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Multiple eval injection vulnerabilities in mods/_standard/gradebook/edit_marks.php in ATutor 2.2 and earlier allow remote authenticated users with the AT_PRIV_GRADEBOOK privilege to execute arbitrary PHP code via the (1) asc or (2) desc parameter.

Affected products

• Atutor Atutor: up to and including 2.2

Published 2015-11-16. Last modified 2026-06-17.