| 제목 | hzmanyun.com education and training system v2.1.3 RCE |
|---|
| 설명 | The /scorm endpoint in the application is vulnerable to Remote Code Execution (RCE) due to improper handling of parametor like param. An attacker can inject the command , leading to RCE of the system. |
|---|
| 원천 | ⚠️ https://github.com/heiheixz/report/blob/main/nxb_2.md |
|---|
| 사용자 | heihei_XZ (UID 81980) |
|---|
| 제출 | 2025. 02. 25. PM 02:28 (2 연령 ago) |
|---|
| 모더레이션 | 2025. 03. 04. PM 02:50 (7 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 298521 [hzmanyun Education and Training System 2.1.3 UploadImageController.java scorm param 권한 상승] |
|---|
| 포인트들 | 16 |
|---|