The “Teacher Edit” function of... CVE-2021-42330
5.5
AV
AC
AU
C
I
A
发布：
2021-10-15
修订：
2024-11-21
The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control. After logging in with user’s privilege, remote attackers can access and edit other users’ credential and personal information by crafting URL parameters.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有1条受影响产品信息
