xzs-mysql >= t3.4.0 is vulnerable to Insecure Permissions...
High severity
Unreviewed
Published
Jan 26, 2022
to the GitHub Advisory Database
•
Updated Feb 3, 2023
Description
Published by the National Vulnerability Database
Jan 25, 2022
Published to the GitHub Advisory Database
Jan 26, 2022
Last updated
Feb 3, 2023
xzs-mysql >= t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destroy real data.
References