CVE-2020-21152
SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunction.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2023-01-20
- Last modified
- 2025-04-03
- Weaknesses
- CWE-89
Affected products
References
- http://8sec.cc/index.php/archives/330/
- https://gitee.com/inxeduopen/inxedu/issues/I14DNG
