by Kastro
Paper/Archive/CVE-2025-1144

CVE-2025-1144

Quanxun School Affairs System — Quanxun School Affairs System - Exposure of Sensitive Information

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA, ADP agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 43.2.432 × 208.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

School Affairs System from Quanxun has an Exposure of Sensitive Information, allowing unauthenticated attackers to view specific pages and obtain database information as well as plaintext administrator credentials.

Affected

ProductAffectedFixed inSource
School Affairs Systemall versions–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
twcert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeuptwcert.org.tw/tw/cp-132-8415-853e0-1.htmlwriteuptwcert.org.tw/en/cp-139-8416-b6cba-2.html