提出 #429033: 上海鸽蛋网络科技有限公司 Teaching online teaching platform v2.7 SQL Injection情報

タイトル上海鸽蛋网络科技有限公司 Teaching online teaching platform v2.7 SQL Injection
説明Teaching is an open-source system developed in Java by Shanghai Pigeon Egg Network Technology Co., Ltd. It offers a low-cost trial opportunity for institutions and schools to provide STEAM online education solutions. The platform integrates CRM, academic management, homework, question bank, competition, and community systems. It also encapsulates common tools such as various utility classes, WeChat ecosystem integration, and payment integration. The official open-source address is: https://github.com/open-scratch/teaching-open The Teaching online teaching platform <= version 2.7 has a SQL injection vulnerability. Attackers can exploit this vulnerability to obtain sensitive system data.
ソース⚠️ https://wiki.shikangsi.com/post/share/dfde9afc-8d64-4022-a6ca-3c1a323c5e66
ユーザー
 wiki (UID 72124)
送信2024年10月22日 04:50 (2 年 ago)
モデレーション2024年10月30日 14:41 (8 days later)
ステータス承諾済み
VulDBエントリ282520 [open-scratch Teaching 在线教学平台 迄 2.7 URL getDictItemsByTable SQLインジェクション]
ポイント20

Want to stay up to date on a daily basis?

Enable the mail alert feature now!