CVE-2015-7712: Multiple eval injection vulnerabilities in mods/_standard/gradebook/edit_marks.php in ATutor 2.2 and earlie...

Security readout for executives and security teams

CVE-2015-7712 affects ATutor 2.2 and earlier. A logged-in user with gradebook privileges could make the application execute PHP code on the server. For organizations still running legacy ATutor, this is a serious server-compromise risk, but the sources do not show confirmed active exploitation. Exposure is most likely in legacy ATutor installations at version 2.2 or earlier, especially where gradebook access is delegated beyond tightly trusted administrators. Internet-facing learning platforms increase business risk. Treat this as high priority if ATutor is still in use. The vulnerability can lead to server-side code execution, but remediation planning should start with asset discovery because the affected software is old and source evidence is limited. Mitigation focus: Identify any ATutor 2.2 or earlier installations.; Check ATutor vendor guidance for a fixed or supported release.; Restrict AT_PRIV_GRADEBOOK to trusted administrators only..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.