Export limit exceeded: 425824 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2021-42332

ShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-3

The “List View” function of ShinHer StudyOnline System is not under authority control. After logging in with user’s privilege, remote attackers can access the content of other users’ message boards by crafting URL parameters.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Xinheinformation
Products
Xinhe Teaching Platform System
CVE-2021-42331

ShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-2

The “Study Edit” function of ShinHer StudyOnline System does not perform permission control. After logging in with user’s privilege, remote attackers can access and edit other users’ tutorial schedule by crafting URL parameters.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Xinheinformation
Products
Xinhe Teaching Platform System
CVE-2021-42330

ShinHer Information Co., LTD. ShinHer StudyOnline System - Improper Authorization-1

The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control. After logging in with user’s privilege, remote attackers can access and edit other users’ credential and personal information by crafting URL parameters.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Xinheinformation
Products
Xinhe Teaching Platform System
CVE-2021-42329

ShinHer Information Co., LTD. ShinHer StudyOnline System - Stored XSS

The “List_Add” function of message board of ShinHer StudyOnline System does not filter special characters in the title parameter. After logging in with user’s privilege, remote attackers can inject JavaScript and execute stored XSS attacks.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Xinheinformation
Products
Xinhe Teaching Platform System