Security ATutor 2.2 Session Variable Overloading November 4, 2015 007admin Leave a comment ATutor versions 2.2 and below suffer from a session variable overloading vulnerability.