SQL Injection in com/inxedu/OS/edu/controller/letter/AdminMsgSystemController in Inxedu v2.0.6 via the ids parameter to admin/letter/delsystem.
References
Link | Resource |
---|---|
https://gitee.com/inxeduopen/inxedu/issues/I294XL | Exploit Issue Tracking Third Party Advisory |
Configurations
Information
Published : 2021-04-29 10:15
Updated : 2021-04-30 16:33
NVD link : CVE-2020-35430
Mitre link : CVE-2020-35430
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
inxedu
- inxedu