CVE-2025-1947

Affects: hzmanyun Education and Training System 2.1.3. Vulnerability: command injection in the scorm function of UploadImageController.java caused by improper handling of the param argument. Impact: remote exploitation with full impact on confidentiality, integrity, and availability as indicated ...