CVE-2020-35430 | Severity.io

Description

SQL Injection in com/inxedu/OS/edu/controller/letter/AdminMsgSystemController in Inxedu v2.0.6 via the ids parameter to admin/letter/delsystem.

Related CPE's

Vulnerable

References

ExploitIssue TrackingThird Party Advisory

ExploitIssue TrackingThird Party Advisory

Weaknesses

Primary

CWE-89

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

Information

Source identifier

Vulnerability status

Modified

Published

2021-04-29T15:15:08.943Z

4 years ago

Last modified

2024-11-21T04:27:16.877Z

1 year ago