9 matches found
EUVD-2025-16261
Malicious code in bioql PyPI...
CVE-2025-5171
A vulnerability, which was classified as critical, has been found in llisoft MTA Maita Training System 4.5. This issue affects the function this.fileService.download of the file com\llisoft\controller\OpenController.java. The manipulation of the argument url leads to unrestricted upload. The atta...
CVE-2025-5171
A vulnerability, which was classified as critical, has been found in llisoft MTA Maita Training System 4.5. This issue affects the function this.fileService.download of the file com\llisoft\controller\OpenController.java. The manipulation of the argument url leads to unrestricted upload. The atta...
CVE-2025-5171 llisoft MTA Maita Training System OpenController.java this.fileService.download unrestricted upload
A vulnerability, which was classified as critical, has been found in llisoft MTA Maita Training System 4.5. This issue affects the function this.fileService.download of the file com\llisoft\controller\OpenController.java. The manipulation of the argument url leads to unrestricted upload. The atta...
CVE-2025-5171
The CVE-2025-5171 entry concerns llisoft MTA Maita Training System 4.5. Affected: the file download path through this.fileService.download in com\llisoft\controller\OpenController.java. Root cause: argument url manipulation enables unrestricted upload. Impact: remote attack possible with high sev...
CVE-2025-5170 llisoft MTA Maita Training System AdminShitiController.java AdminShitiListRequestVo sql injection
A vulnerability classified as critical was found in llisoft MTA Maita Training System 4.5. This vulnerability affects the function AdminShitiListRequestVo of the file com\llisoft\controller\admin\shiti\AdminShitiController.java. The manipulation of the argument stTypeIds leads to sql injection. T...
CVE-2025-5170
The CVE-2025-5170 issue affects llisoft MTA Maita Training System version 4.5, specifically the AdminShitiListRequestVo function in com\llisoft\controller\admin\shiti\AdminShitiController.java. The vulnerability arises from improper handling of the stTypeIds argument, enabling SQL injection that ...
llisoft MTA Maita Training System 代码问题漏洞
The llisoft MTA Maita Training System is a training system from China Dongke llisoft. A code issue exists in version 4.5 of the llisoft MTA Maita Training System, which is caused by a parameter url operation that results in unlimited uploads...
PT-2025-22912 · Llisoft · Llisoft Mta Maita Training System
Name of the Vulnerable Software and Affected Versions: llisoft MTA Maita Training System version 4.5 Description: A critical vulnerability was found in the llisoft MTA Maita Training System, affecting the AdminShitiListRequestVo function of the file...