CVE-2019-3576

inxedu through 2018-12-24 has a SQL Injection vulnerability that can lead to information disclosure via the deleteFaveorite/ PATHINFO. The vulnerable code location is com.inxedu.os.edu.controller.user.UserControllerdeleteFavorite aka deleteFavorite in...

CVE-2019-3576

CVE-2019-3576 affects the inxedu platform through 2018-12-24, where a SQL injection vulnerability exists in the user flow—specifically in the deleteFavorite path handled by UserController (deleteFavorite in com/inxedu/os/edu/controller/user/UserController.java) and triggered via MyBatis in course...

PT-2019-16624

Name of the Vulnerable Software and Affected Versions inxedu through 2018-12-24 Description The issue allows for information disclosure due to a SQL Injection vulnerability. This can be exploited via the deleteFaveorite/ PATH INFO. The vulnerable code is located in the...