Xinheinformation Xinhe Teaching Platform System
4 CVEs affecting Xinheinformation Xinhe Teaching Platform System. Latest disclosed: 2021-10-15. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-42330 | High | 8.8 | 2021-10-15 | The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control. After logging in with user’s privilege, remote attackers can acce… |
CVE-2021-42331 | Medium | 5.4 | 2021-10-15 | The “Study Edit” function of ShinHer StudyOnline System does not perform permission control. After logging in with user’s privilege, remote attackers can acces… |
CVE-2021-42329 | Medium | 5.4 | 2021-10-15 | The “List_Add” function of message board of ShinHer StudyOnline System does not filter special characters in the title parameter. After logging in with user’s… |
CVE-2021-42332 | Medium | 4.3 | 2021-10-15 | The “List View” function of ShinHer StudyOnline System is not under authority control. After logging in with user’s privilege, remote attackers can access the… |