CVE-2025-1947

creationtimestamp| type| source ---|---|--- 2025-03-04 21:15:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljlf3z5rhv2f 2025-03-04 22:32:23+00:00| seen| https://t.me/cvedetector/19543 2025-08-18 18:31:00+00:00| seen| MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7...

CVE-2025-1947

A vulnerability classified as critical has been found in hzmanyun Education and Training System 2.1.3. This affects the function scorm of the file UploadImageController.java. The manipulation of the argument param leads to command injection. It is possible to initiate the attack remotely. The...

CVE-2025-1947 hzmanyun Education and Training System UploadImageController.java scorm command injection

A vulnerability classified as critical has been found in hzmanyun Education and Training System 2.1.3. This affects the function scorm of the file UploadImageController.java. The manipulation of the argument param leads to command injection. It is possible to initiate the attack remotely. The...

CVE-2025-1947

Affects: hzmanyun Education and Training System 2.1.3. Vulnerability: command injection in the scorm function of UploadImageController.java caused by improper handling of the param argument. Impact: remote exploitation with full impact on confidentiality, integrity, and availability as indicated ...