Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A SQL Injection vulnerability exists in UniverSIS UniverSIS-API through 1.2.1 via the $select parameter to multiple API endpoints. A remote authenticated attacker could send crafted SQL statements to a vulnerable endpoint (such as /api/students/me/messages/) to, for example, retrieve personal information or change grades.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
UniverSIS UniverSIS-API SQL注入漏洞
Vulnerability Description
UniverSIS UniverSIS-API是一个学生信息系统构接口。 UniverSIS UniverSIS-API 存在安全漏洞，该漏洞源于经过身份验证的远程攻击者可以将精心制作的 SQL 语句发送到易受攻击的端点（例如 /api/students/me/messages/），例如，检索个人信息或更改成绩。
CVSS Information
N/A
Vulnerability Type
N/A