Hzmanyun vulnerabilities
We track 4 vulnerabilities in Hzmanyun products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 4, 2025.
Latest Hzmanyun vulnerabilities
- 9.8 Critical severity
Education and Training System: Improper Neutralization of Special Elements used in a Command
A vulnerability classified as critical has been found in hzmanyun Education and Training System 2.1.3. This affects the function scorm of the file UploadImageController.java. The manipulation of the argument param leads to command injection. It is possible to
- 9.8 Critical severity
Education and Training System: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in hzmanyun Education and Training System 2.1. It has been rated as critical. Affected by this issue is the function exportPDF of the file /user/exportPDF. The manipulation of the argument id leads to command injection. The attack may
- 9.8 Critical severity
Education and Training System: Improper Neutralization of Special Elements used in an OS Command
A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1. Affected by this vulnerability is the function pdf2swf of the file /pdf2swf. The manipulation of the argument file leads to os command injection. The attack can b
- 9.8 Critical severity
Education and Training System: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1. This vulnerability affects the function saveImage. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The e