ATutor versions 2.2 and below suffer from a remote php code injection vulnerability. Continue reading...