Unrestricted file upload

Beijing Runnier Network Technology Co., Ltd Open virtual simulation experiment teaching management platform software 2.0 has a file upload vulnerability, which can be exploited by an attacker to gain control of the server...

CVE-2022-28120

The CVE-2022-28120 entry concerns Beijing Runnier Network Technology Co., Ltd Open virtual simulation experiment teaching management platform software 2.0. A vulnerability in the file upload feature allows an attacker to gain control of the server. The root cause is described in connected sources...

SQL Injection Vulnerability in the Teaching Management Platform for Higher and Continuing Education of Huafu Education Group

Waffle Education Group is an online education company focused on providing distance learning content and learning support services to universities and other organizations and individuals. A SQL injection vulnerability exists in the Huafu Education Group Higher Continuing Education Teaching...