CVE-2024-13109

Medium CVSS: 6.9

A vulnerability was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. It has been rated as critical. This issue affects some unknown processing of the file /doc.html. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Vendor

Kaoshifeng

Product

Yunfan Learning Examination System

CWE

CWE-266

Yayın Tarihi

2025-01-02 13:15:07

Güncelleme

2025-08-25 17:14:41

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-266 Yunfan Learning Examination System MEDIUM Kaoshifeng 2025

Referanslar

https://github.com/qiutiandefeng/yfexam-exam/issues/4 https://github.com/qiutiandefeng/yfexam-exam/issues/4#issue-2754670219 https://vuldb.com/?ctiid.289925 https://vuldb.com/?id.289925 https://vuldb.com/?submit.467695 https://github.com/qiutiandefeng/yfexam-exam/issues/4 https://github.com/qiutiandefeng/yfexam-exam/issues/4#issue-2754670219