Submit #429033: 上海鸽蛋网络科技有限公司 Teaching online teaching platform v2.7 SQL Injectioninfo

Titel上海鸽蛋网络科技有限公司 Teaching online teaching platform v2.7 SQL Injection
BeschreibungTeaching is an open-source system developed in Java by Shanghai Pigeon Egg Network Technology Co., Ltd. It offers a low-cost trial opportunity for institutions and schools to provide STEAM online education solutions. The platform integrates CRM, academic management, homework, question bank, competition, and community systems. It also encapsulates common tools such as various utility classes, WeChat ecosystem integration, and payment integration. The official open-source address is: https://github.com/open-scratch/teaching-open The Teaching online teaching platform <= version 2.7 has a SQL injection vulnerability. Attackers can exploit this vulnerability to obtain sensitive system data.
Quelle⚠️ https://wiki.shikangsi.com/post/share/dfde9afc-8d64-4022-a6ca-3c1a323c5e66
Benutzer
 wiki (UID 72124)
Einreichung22.10.2024 04:50 (vor 2 Jahren)
Moderieren30.10.2024 14:41 (8 days later)
StatusAkzeptiert
VulDB Eintrag282520 [open-scratch Teaching 在线教学平台 bis 2.7 URL getDictItemsByTable SQL Injection]
Punkte20

Do you know our Splunk app?

Download it now for free!