Sql injection

2023-01-2019:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

inxedu 2.0.6

vulnerability

arbitrary commands

functionids parameter

saverolefunction

nvd

9.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.9%

SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunction.

CPENameOperatorVersion
inxedueq2.0.6

CPE	Name	Operator	Version
	inxedu	eq	2.0.6

References

8sec.cc/index.php/archives/330/

gitee.com/inxeduopen/inxedu/issues/I14DNG