ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Vulnerabilities

4 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV onlyPublic PoCCVSS ≥ 9CVSS ≥ 7EPSS ≥ 10%EPSS ≥ 50%Window24h7d30d90dAll
StackAllWordPressE-commerceDrupalJoomlanpmpipMavenGoPackagistRubyGemsNuGet
SortpublishedepsscvssKEV dateupdatedvendor: xinheinformation ✕
CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2021-42330
+3 in the same advisory: …42331 …42329 …42332
The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control.

The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control. After logging in with user’s privilege, remote attackers can access and edit other users’ credential and personal information by crafting URL parameters.

NVD description · AI analysis pending		8.8
group max
<1%
  • xinheinformation xinhe teaching platform system
—