CVE-2025-1144

CRITICAL

9.8

Description

School Affairs System from Quanxun has an Exposure of Sensitive Information, allowing unauthenticated attackers to view specific pages and obtain database information as well as plaintext administrator credentials.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie2/11/2025

Derniere modification8/26/2025

Sourcenvd

Observations honeypot0

Faiblesses (CWE)

CWE-497

References

https://www.twcert.org.tw/en/cp-139-8416-b6cba-2.html(twcert@cert.org.tw)

https://www.twcert.org.tw/tw/cp-132-8415-853e0-1.html(twcert@cert.org.tw)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.