漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
rahman SelectCours Template CacheController.java getCacheNames injection
Vulnerability Description
A vulnerability has been found in rahman SelectCours 1.0 and classified as problematic. Affected by this vulnerability is the function getCacheNames of the file CacheController.java of the component Template Handler. The manipulation of the argument fragment leads to injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-255379.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Vulnerability Type
输出中的特殊元素转义处理不恰当(注入)
Vulnerability Title
SelectCours 安全漏洞
Vulnerability Description
SelectCours是AbuCoder开源的一个基于若依快速开发框架的中学选课系统。 SelectCours 1.0版本存在安全漏洞,该漏洞源于组件Template Handler的文件CacheController.java的函数getCacheNames存在注入漏洞。
CVSS Information
N/A
Vulnerability Type
N/A