Critical · 9.8 CVE-2020-21152 EUVD-2020-13928GHSA-p9pv-g558-xj48

SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefuncti…

Published Jan 20, 2023 · Updated Apr 3, 2025 · Assigned by mitre

Description

SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunction.