5 matches found
CVE-2020-21152
SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunction...
CVE-2020-21152
SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunction...
Sql injection
SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunction...
PT-2023-11577 · Inxedu · Inxedu
Name of the Vulnerable Software and Affected Versions: inxedu version 2.0.6 Description: The issue allows attackers to execute arbitrary commands via the functionIds parameter to the "/saverolefunction" API endpoint. This enables attackers to potentially access and manipulate sensitive data...
