提交 #429033: 上海鸽蛋网络科技有限公司 Teaching online teaching platform v2.7 SQL Injection信息

标题上海鸽蛋网络科技有限公司 Teaching online teaching platform v2.7 SQL Injection
描述Teaching is an open-source system developed in Java by Shanghai Pigeon Egg Network Technology Co., Ltd. It offers a low-cost trial opportunity for institutions and schools to provide STEAM online education solutions. The platform integrates CRM, academic management, homework, question bank, competition, and community systems. It also encapsulates common tools such as various utility classes, WeChat ecosystem integration, and payment integration. The official open-source address is: https://github.com/open-scratch/teaching-open The Teaching online teaching platform <= version 2.7 has a SQL injection vulnerability. Attackers can exploit this vulnerability to obtain sensitive system data.
来源⚠️ https://wiki.shikangsi.com/post/share/dfde9afc-8d64-4022-a6ca-3c1a323c5e66
用户
 wiki (UID 72124)
提交2024-10-22 04時50分 (2 年前)
管理2024-10-30 14時41分 (8 days later)
状态已接受
VulDB条目282520 [open-scratch Teaching 在线教学平台 直到 2.7 URL getDictItemsByTable SQL注入]
积分20

Want to stay up to date on a daily basis?

Enable the mail alert feature now!