CVE-2020-21152

SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunction...

PT-2023-11577 · Inxedu · Inxedu

Name of the Vulnerable Software and Affected Versions: inxedu version 2.0.6 Description: The issue allows attackers to execute arbitrary commands via the functionIds parameter to the "/saverolefunction" API endpoint. This enables attackers to potentially access and manipulate sensitive data...