← Database

CVE-2021-42332

MEDIUM CVSS: 4.3 Published: 2021-10-15 Modified: 2026-06-17

Description

The “List View” function of ShinHer StudyOnline System is not under authority control. After logging in with user’s privilege, remote attackers can access the content of other users’ message boards by crafting URL parameters.

Affected Platforms

Xinheinformation Xinhe Teaching Platform System

Weakness Type

CWE-285, NVD-CWE-Other

References