CVE-2026-64969 | ATutor 2.2.4 Profile Album Endpoint member_id resource injection

A vulnerability marked as problematic has been reported in ATutor 2.2.4. This affects an unknown part of the component Profile Album Endpoint. Performing a manipulation of the argument member_id results in improper control of resource identifiers. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is reported as CVE-2026-64969. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More