Inxedu Inxedu SQL injection vulnerability

Inxedu inxedu is a set of open source online education platform of China Inxedu Inxedu company. The platform includes an online school system, a live broadcasting system, an examination system and a marketing website. Inxedu v2.0.6 suffers from a SQL injection vulnerability, which originates from...

PT-2021-11764

Name of the Vulnerable Software and Affected Versions: Inxedu version 2.0.6 Description: The issue is related to SQL Injection in the AdminMsgSystemController class, specifically via the ids parameter in the admin/letter/delsystem endpoint. This allows for potential SQL injection attacks...

CVE-2020-35430: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in com/inxedu/OS/edu/controller/letter/AdminMsgSystemController in Inxedu v2.0.6 via the ids parameter to admin/letter/delsystem...