CVE-2025-1388

Mô tả

Tham khảo

• twcert.org.tw/en/cp-139-8430-32513-2.html · Third Party Advisory
• twcert.org.tw/tw/cp-132-8429-07d7e-1.html · Third Party Advisory

Lỗ hổng khác của orca hcm

• CVE-2025-1389CAO 8.8Orca HCM from Learning Digital has a SQL Injection vulnerability, allowing attackers with regular privileges to inject arbitrary SQL command…
• CVE-2025-1387NGHIÊM TRỌNG 9.8Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the syst…
• CVE-2024-8585TRUNG BÌNH 6.5Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionality, allowing a remote attacker…
• CVE-2024-8584NGHIÊM TRỌNG 9.8Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote attacker to exploit this functio…
• CVE-2021-35968TRUNG BÌNH 4.3The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly. Remote attackers ca…