CVE-2019-11196

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0200%

EPSS Percentile27.08th

Published2019年4月12日

Last Modified2024年11月21日

Vulnerability Description

An authentication bypass vulnerability in all versions of ValuePLUS Integrated University Management System (IUMS) allows unauthenticated, remote attackers to gain administrator privileges via the Teachers Web Panel (TWP) User ID or Password field. If exploited, the attackers could perform any actions with administrator privileges (e.g., enumerate/delete all the students' personal information or modify various settings).

Affected Platforms (CPE)

📦

Vpcsbd

Integrated University Management System

All versions

References & Advisories

🔗 https://blog.ziaurrashid.com/sql-injection-auth-bypass-on-iums/

Vulnerability Description

Affected Platforms (CPE)

Integrated University Management System

References & Advisories

相關漏洞威脅