# Note: This was successfully tested against a windows install however it should work with linux. "Referer": " + target + "/ATutor/mods/_core/languages/language_import.php", Print "- Example: %s admin mypassword 'whoami'" % sys.argv Print "- Discovery / PoC by liquidsky (JMcPeters) ^^" Print "- ATutor 2.2.4 Arbitrary File Upload / RCE " # Notes: This application is no longer being maintained so there is no fix for this issue. # resulting in remote code execution via a "." pathname in a ZIP archive to the mods/_core/languages/language_import.php (aka Import New Language) or mods/_standard/patcher/index_admin.php (aka Patcher) component. # Description: ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal # Tested on: Windows 8 / Apache / MySQL (XAMPP) # Exploit Title: ATutor 2.2.4 'language_import' Arbitrary File Upload / RCE Then, select Options.Īfter the language pack has been downloaded and installed, click the Back button.Change Mirror Download #!/usr/bin/env python When the status shows Language pack available, click on it. Windows Update searches for the language pack requested. Start Windows and connect the computer to the Internet.įrom the Start page, click the Windows icon in the lower-left corner, then select Settings. Images shown can vary, depending on the version of Windows® 10 you are setting up. After setup is complete, follow the steps to download and install your preferred language pack. If your preferred language isn't on the list of available languages, choose English to complete Windows Setup. Windows* Setup asks you to select your preferred language. Install Language Packs and Alternative Keyboards in Windows® 10 Version 1607 and earlier Restart the computer for the language change to take effect.You'll be able to choose from the options installed. To change the keyboard, click the three-letter language abbreviation in the taskbar.After the language and keyboard have downloaded, click the arrow on the top-left corner of the window.To remove any additional keyboards, click the name of the keyboard and select Remove. ![]()
0 Comments
Leave a Reply. |