Skip to content
Noroxi

Mindskip records

6 published records for vendor mindskip.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2024-29401
    39Monitor

    xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted admin to do anything.

    CriticalCVSS 9.8No exploitEPSS 1%

    mindskip · xzs-mysqlMar 26, 2024

  • CVE-2021-46086
    30Monitor

    xzs-mysql >= t3.4.0 is vulnerable to Insecure Permissions.

    HighCVSS 7.5No exploitEPSS 1%

    mindskip · xzs-mysqlJan 25, 2022

  • CVE-2022-41431
    21Monitor

    xzs v3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /admin/question/edit.

    MediumCVSS 5.4No exploitEPSS 1%

    mindskip · xzsOct 17, 2022

  • CVE-2025-1084
    21Monitor

    Mindskip xzs-mysql 学之思开源考试系统 cross-site request forgery

    MediumCVSS 5.3No exploitEPSS 0%

    mindskip · xzs-mysqlFeb 6, 2025

  • CVE-2025-1082
    20Monitor

    Mindskip xzs-mysql 学之思开源考试系统 Exam Edit edit cross site scripting

    MediumCVSS 5.1No exploitEPSS 0%

    mindskip · xzs-mysqlFeb 6, 2025

  • CVE-2025-1083
    9Monitor

    Mindskip xzs-mysql 学之思开源考试系统 CORS cross-domain policy

    LowCVSS 2.3No exploitEPSS 0%

    mindskip · xzs-mysqlFeb 6, 2025