SQL Injection vulnerability in file /inxedu/demo_inxedu_open/src/main/resources/mybatis/inxedu/website/WebsiteImagesMapper.xml in inxedu 2.0.6 via the id value.
References
| Link | Resource |
|---|---|
| https://gitee.com/inxeduopen/inxedu/issues/I14DNJ | Exploit Third Party Advisory |
| https://github.com/876054426/vul/blob/master/inxedu%20through%202018-12-24%20has%20a%20SQL%20Injection%20vulnerability.md | Exploit Third Party Advisory |
| https://gitee.com/inxeduopen/inxedu/issues/I14DNJ | Exploit Third Party Advisory |
| https://github.com/876054426/vul/blob/master/inxedu%20through%202018-12-24%20has%20a%20SQL%20Injection%20vulnerability.md | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 05:27
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| References | () https://gitee.com/inxeduopen/inxedu/issues/I14DNJ - Exploit, Third Party Advisory | |
| References | () https://github.com/876054426/vul/blob/master/inxedu%20through%202018-12-24%20has%20a%20SQL%20Injection%20vulnerability.md - Exploit, Third Party Advisory |
Information
Published : 2023-01-18 19:15
Updated : 2024-11-21 05:27
NVD link : CVE-2020-35326
Mitre link : CVE-2020-35326
CVE.ORG link : CVE-2020-35326
JSON object : View
Products Affected
inxedu
- inxedu
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')