CVE-2025-11080

CVE-2025-11080 affects zhuimengshaonian wisdom-education up to 1.0.4. The vulnerability lies in ExamInfoController.java, in the selectStudentExamInfoList function, where manipulation of the subjectId parameter leads to improper authorization. Itمكن be exploited remotely and the exploit has been p...

PT-2025-39747

Name of the Vulnerable Software and Affected Versions zhuimengshaonian wisdom-education versions through 1.0.4 Description A security issue exists in zhuimengshaonian wisdom-education. Improper authorization can occur through manipulation of the subjectId argument within the...

CVE-2025-11080: Improper Authorization

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. This vulnerability affects the function selectStudentExamInfoList of the file src/main/java/com/education/api/controller/student/ExamInfoController.java. Such manipulation of the argument subjectId leads ...