https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 04:38:25 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-00773 cnvd-2019-00773 https://cve.radiocsirt.org/vuln/cnvd-2019-00773 https://cve.radiocsirt.org/vuln/euvd-2026-172871 EUVD-2026-172871 https://cve.radiocsirt.org/vuln/euvd-2026-172871 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3576 <p>inxedu through 2018-12-24 has a SQL Injection vulnerability that can lead to information disclosure via the deleteFaveorite/ PATH_INFO. The vulnerable code location is com.inxedu.os.edu.controller.user.UserController#deleteFavorite (aka deleteFavorite in com/inxedu/os/edu/controller/user/UserController.java), where courseFavoritesService.deleteCourseFavoritesById is mishandled during use of MyBatis. NOTE: UserController.java has a spelling variation in an annotation: a @RequestMapping(&#34;/deleteFaveorite/{ids}&#34;) line followed by a &#34;public ModelAndView deleteFavorite&#34; line.</p> <p>inxedu through 2018-12-24 has a SQL Injection vulnerability that can lead to information disclosure via the deleteFaveorite/ PATH_INFO. The vulnerable code location is com.inxedu.os.edu.controller.user.UserController#deleteFavorite (aka deleteFavorite in com/inxedu/os/edu/controller/user/UserController.java), where courseFavoritesService.deleteCourseFavoritesById is mishandled during use of MyBatis. NOTE: UserController.java has a spelling variation in an annotation: a @RequestMapping(&#34;/deleteFaveorite/{ids}&#34;) line followed by a &#34;public ModelAndView deleteFavorite&#34; line.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-3576 https://cve.radiocsirt.org/vuln/ghsa-qph5-58wx-fg4h <p>inxedu through 2018-12-24 has a SQL Injection vulnerability that can lead to information disclosure via the deleteFaveorite/ PATH_INFO. The vulnerable code location is com.inxedu.os.edu.controller.user.UserController#deleteFavorite (aka deleteFavorite in com/inxedu/os/edu/controller/user/UserController.java), where courseFavoritesService.deleteCourseFavoritesById is mishandled during use of MyBatis. NOTE: UserController.java has a spelling variation in an annotation: a @RequestMapping(&#34;/deleteFaveorite/{ids}&#34;) line followed by a &#34;public ModelAndView deleteFavorite&#34; line.</p> <p>inxedu through 2018-12-24 has a SQL Injection vulnerability that can lead to information disclosure via the deleteFaveorite/ PATH_INFO. The vulnerable code location is com.inxedu.os.edu.controller.user.UserController#deleteFavorite (aka deleteFavorite in com/inxedu/os/edu/controller/user/UserController.java), where courseFavoritesService.deleteCourseFavoritesById is mishandled during use of MyBatis. NOTE: UserController.java has a spelling variation in an annotation: a @RequestMapping(&#34;/deleteFaveorite/{ids}&#34;) line followed by a &#34;public ModelAndView deleteFavorite&#34; line.</p> https://cve.radiocsirt.org/vuln/ghsa-qph5-58wx-fg4h https://cve.radiocsirt.org/vuln/gsd-2019-3576 gsd-2019-3576 https://cve.radiocsirt.org/vuln/gsd-2019-3576