CVE-2025-3849

A vulnerability classified as problematic was found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This vulnerability affects unknown code of the file /api/studentPWD. The manipulation of the argument studentId leads to unverified password change. The attack can be initiated remotely. The exploit has...

CVE-2025-3849

A vulnerability classified as problematic was found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This vulnerability affects unknown code of the file /api/studentPWD. The manipulation of the argument studentId leads to unverified password change. The attack can be initiated remotely. The exploit has...

CVE-2025-3849

creationtimestamp| type| source ---|---|--- 2025-04-22 00:03:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12771 2025-04-22 03:04:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lneoz32tcb2u 2025-04-22 04:11:23+00:00| seen|...

CVE-2025-3849 YXJ2018 SpringBoot-Vue-OnlineExam studentPWD unverified password change

A vulnerability classified as problematic was found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This vulnerability affects unknown code of the file /api/studentPWD. The manipulation of the argument studentId leads to unverified password change. The attack can be initiated remotely. The exploit has...

CVE-2025-3849 YXJ2018 SpringBoot-Vue-OnlineExam studentPWD unverified password change

A vulnerability classified as problematic was found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This vulnerability affects unknown code of the file /api/studentPWD. The manipulation of the argument studentId leads to unverified password change. The attack can be initiated remotely. The exploit has...

CVE-2025-3849

CVE-2025-3849 affects YXJ2018 SpringBoot-Vue-OnlineExam 1.0 with a vulnerability in the file /api/studentPWD. The manipulation of the parameter studentId enables an unverified password change, and the attack can be initiated remotely. Public reports/entries confirm the existence of this issue acr...