Wirtualna Uczelnia
Approved changes feed: RSS · Atom
cpe:2.3:a:simple_sa:wirtualna_uczelnia:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Simple Sa (6570198d-7530-59ad-a8e8-ff5feddc6e2a) |
|---|---|
| Product | Wirtualna Uczelnia (a4c17f06-19dd-5926-91e7-5757971d3ee9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-34907 |
vulnerable | 2026-06-08 07:59:13.292217 |
Reflected Cross-Site Scripting (XSS) in Wirtualna Uczelnia
Wirtualna Uczelnia is vulnerable to Reflected Cross‑Site Scripting (XSS) due to insecure handling of the locale parameter across multiple endpoints. An attacker can craft a malicious URL with JavaScript embedded in the locale parameter and send it to a victim. When the victim opens the link, the injected script will be executed in their browser.
This issue affects Wirtualna Uczelnia versions up to wu#2016.437.295#0#20260327_105545
Published: 2026-06-02T08:31:09.890Z
Updated: 2026-06-02T13:22:35.624Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34906 |
vulnerable | 2026-06-08 07:59:13.291999 |
Server-Side Template Injection (SSTI) in Wirtualna Uczelnia
Server-Side Template Injection (SSTI) in Wirtualna Uczelnia allows an unauthenticated attacker to perform Remote Code Execution (RCE). In the endpoint redirectToUrl and parameter redirectUrlParameter, insufficient input validation permits injection of arbitrary template expressions that are executed on the server. Successful exploitation can allow an attacker to run remote commands, including establishing a reverse shell.
This issue affects Wirtualna Uczelnia versions up to wu#2016.437.295#0#20260327_105545
Published: 2026-06-02T08:31:02.827Z
Updated: 2026-06-02T13:15:12.913Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12140 |
vulnerable | 2026-06-08 07:04:29.752838 |
RCE in Wirtualna Uczelnia
The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer to perform arbitrary code execution.
This issue was fixed in version wu#2016.1.5513#0#20251014_113353
Published: 2025-11-27T14:01:59.138Z
Updated: 2025-11-28T15:22:02.344Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.