CVEvulnerability
CVE-2025-1144
9.8 CRITICAL
Official page ↗
- Status
- Deferred
- Published
- 2025-02-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-497
Description
School Affairs System from Quanxun has an Exposure of Sensitive Information, allowing unauthenticated attackers to view specific pages and obtain database information as well as plaintext administrator credentials.
Related
Weakness · CWE (1)
- CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere weakness
References
- https://www.twcert.org.tw/en/cp-139-8416-b6cba-2.html www.twcert.org.tw
- https://www.twcert.org.tw/tw/cp-132-8415-853e0-1.html www.twcert.org.tw