GCVE - cpe:2.3:a:zhuimengshaonian:wisdom-education:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:zhuimengshaonian:wisdom-education:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Zhuimengshaonian (`6054fc4e-bffa-505d-9544-2c351b526684`)
Product	Wisdom Education (`b6ab4e0a-8cb8-5c6d-a032-c3c4065740bb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-11321`	vulnerable	2026-06-08 07:02:28.585262	zhuimengshaonian wisdom-education WrongBookController.java authorization MEDIUM (4.3) A vulnerability was detected in zhuimengshaonian wisdom-education up to 1.0.4. The affected element is an unknown function of the file src/main/java/com/education/api/controller/student/WrongBookController.java. Performing manipulation of the argument subjectId results in authorization bypass. The attack can be initiated remotely. The exploit is now public and may be used. Published: 2025-10-06T05:02:06.331Z Updated: 2025-10-06T17:20:47.842Z Open on db.gcve.eu Reference links https://vuldb.com/?id.327202 https://vuldb.com/?ctiid.327202 https://vuldb.com/?submit.664395 https://github.com/xkalami-Tta0/CVE/blob/main/wisdom-education/%E6%B0%B4%E5%B9%B3%E8%B6%8A%E6%9D%832.md https://github.com/xkalami-Tta0/CVE/blob/main/wisdom-education/%E6%B0%B4%E5%B9%B3%E8%B6%8A%E6%9D%832.md#vulnerability-reproduction	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11320`	vulnerable	2026-06-08 07:02:28.584904	zhuimengshaonian wisdom-education UploadController.java uploadFile unrestricted upload MEDIUM (6.3) A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Published: 2025-10-06T04:32:06.583Z Updated: 2025-10-06T19:17:16.405Z Open on db.gcve.eu Reference links https://vuldb.com/?id.327201 https://vuldb.com/?ctiid.327201 https://vuldb.com/?submit.664392 https://github.com/xkalami-Tta0/CVE/blob/main/wisdom-education/%E5%89%8D%E5%8F%B0%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md https://github.com/xkalami-Tta0/CVE/blob/main/wisdom-education/%E5%89%8D%E5%8F%B0%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md#vulnerability-reproduction	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11080`	vulnerable	2026-06-08 07:02:28.020159	zhuimengshaonian wisdom-education ExamInfoController.java selectStudentExamInfoList improper authorization MEDIUM (4.3) A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. This vulnerability affects the function selectStudentExamInfoList of the file src/main/java/com/education/api/controller/student/ExamInfoController.java. Such manipulation of the argument subjectId leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Published: 2025-09-27T21:32:06.699Z Updated: 2025-09-29T19:36:16.945Z Open on db.gcve.eu Reference links https://vuldb.com/?id.326121 https://vuldb.com/?ctiid.326121 https://vuldb.com/?submit.661308 https://github.com/xkalami-Tta0/CVE/blob/main/wisdom-education/%E6%B0%B4%E5%B9%B3%E8%B6%8A%E6%9D%83.md https://github.com/xkalami-Tta0/CVE/blob/main/wisdom-education/%E6%B0%B4%E5%B9%B3%E8%B6%8A%E6%9D%83.md#vulnerability-reproduction	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Wisdom Education

Notes

PURL mappings

Vulnerability references

Contribute