← Database

CVE-2021-42330

HIGH CVSS: 8.8 Published: 2021-10-15 Modified: 2026-06-17

Description

The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control. After logging in with user’s privilege, remote attackers can access and edit other users’ credential and personal information by crafting URL parameters.

Affected Platforms

Xinheinformation Xinhe Teaching Platform System

Weakness Type

CWE-285, NVD-CWE-Other

References