ATutor versions 2.2 and below suffer from a remote unrestricted file upload vulnerability. Continue reading...