CVE-2025-11320

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to...

CVE-2025-11321

CVE-2025-11321 affects zhuimengshaonian wisdom-education up to version 1.0.4. The vulnerability resides in an unknown function in src/main/java/com/education/api/controller/student/WrongBookController.java, where manipulating the subjectId argument leads to an authorization bypass. It is exploita...

EUVD-2025-32485

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to...