Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Mindskip records in CISA KEVNo Mindskip vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted admin to do anything.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00784 · Published 2024-03-26 · No fix listed CWE-613
Priority MEDIUM 57
A vulnerability, which was classified as problematic, has been found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00323 · Published 2025-02-06 · No fix listed CWE-352
Priority MEDIUM 56
A vulnerability classified as problematic has been found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.0039 · Published 2025-02-06 · No fix listed CWE-79
Priority MEDIUM 45
A vulnerability classified as problematic was found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0.
CVSS 4.0LOW 2.3· Network · No auth · User interaction · EPSS 0.00329 · Published 2025-02-06 · No fix listed CWE-346
Priority LOW 34
xzs-mysql >= t3.4.0 is vulnerable to Insecure Permissions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00795 · Published 2022-01-25 · No fix listed CWE-276
THREATIST.IORead the docs