hzmanyun Education and Training System OS Command Injection Vulnerability
Vulnerability
A critical OS command injection vulnerability has been identified in hzmanyun Education and Training System version 3.1.1. The issue arises in the pdf2swf function of the /pdf2swf file, where improper handling of the 'file' argument allows for command injection. This vulnerability can be exploited remotely.
Impact
Exploitation of this vulnerability allows for OS command injection, where an attacker can execute arbitrary commands on the server running the application.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
6.6remediation
0.0relevance
0.0threat
6.4urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.