CVE-2020-35326

SQL Injection vulnerability in file /inxedu/demoinxeduopen/src/main/resources/mybatis/inxedu/website/WebsiteImagesMapper.xml in inxedu 2.0.6 via the id value...

CVE-2020-35326

The CVE-2020-35326 entry documents a SQL injection vulnerability in the inxedu product, specifically in the WebsiteImagesMapper.xml around the WebsiteImagesMapper code path for inxedu 2.0.6. The underlying issue is an injection flaw caused by an unsafely used id value in the MyBatis mapping file,...