CVE-2020-35430

SQL Injection in com/inxedu/OS/edu/controller/letter/AdminMsgSystemController in Inxedu v2.0.6 via the ids parameter to admin/letter/delsystem.
References
Link Resource
https://gitee.com/inxeduopen/inxedu/issues/I294XL Exploit Issue Tracking Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:inxedu:inxedu:2.0.6:*:*:*:*:*:*:*

Information

Published : 2021-04-29 10:15

Updated : 2021-04-30 16:33


NVD link : CVE-2020-35430

Mitre link : CVE-2020-35430


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa

Products Affected

inxedu

  • inxedu