Vulnerabilities

TI-2025-01692 CVE-2025-1947 · GHSA-6jf7-p33c-7gw9

hzmanyun Education and Training System UploadImageController.java scorm command injection

MEDIUM 57

A vulnerability classified as critical has been found in hzmanyun Education and Training System 2.1.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.05249 Published 2025-03-04 No fix listed CWE-74

TI-2025-01691 CVE-2025-1946 · GHSA-7729-f2m7-vm5h

MEDIUM 57

A vulnerability was found in hzmanyun Education and Training System 2.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.05249 Published 2025-03-04 No fix listed CWE-74

TI-2025-01442 CVE-2025-1676 · GHSA-5ggv-478m-c2xw

MEDIUM 57

A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0242 Published 2025-02-25 No fix listed CWE-77

TI-2025-01339 CVE-2025-1555 · GHSA-jj9w-p5wc-95q5

HIGH 70

A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00705 Published 2025-02-21 No fix listed CWE-284