medium5.3
CVE-2024-13109
A vulnerability was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2.
Impact
A vulnerability was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. It has been rated as critical. This issue affects some unknown processing of the file /doc.html. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kaoshifeng | Yunfan Learning Examination System | Version 1.9.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/qiutiandefeng/yfexam-exam/issues/4
- https://github.com/qiutiandefeng/yfexam-exam/issues/4#issue-2754670219
- https://vuldb.com/?ctiid.289925
- https://vuldb.com/?id.289925
- https://vuldb.com/?submit.467695
- https://github.com/qiutiandefeng/yfexam-exam/issues/4
- https://github.com/qiutiandefeng/yfexam-exam/issues/4#issue-2754670219