PT-2025-14605 · Unknown · Itning Student Homework Management System

Tttlw1024 · Published 2025-04-03 · Updated 2025-08-13 · CVE-2025-3150

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions itning Student Homework Management System versions 1.2.7 and earlier

Description A problem has been identified in the system, affecting an unknown functionality. This issue leads to cross-site request forgery, which can be exploited remotely. Multiple endpoints may be affected by this issue. The exploit has been made public, which may lead to its use.

Recommendations For itning Student Homework Management System versions 1.2.7 and earlier, consider restricting access to unknown functionalities until a patch is available. As a temporary workaround, restrict access to multiple endpoints to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

CVE-2025-3150

Affected Products

Itning Student Homework Management System

References · 11

• 🔥 https://gitee.com/nwtmd5/cve/issues/IBVLYH · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-3150 · Security Note
• https://osv.dev/vulnerability/CVE-2025-3150 · Vendor Advisory
• https://vuldb.com/?ctiid.303055 · Note
• https://twitter.com/CVEnew/status/1907709583897825377 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1907761193218933080 · Twitter Post
• https://t.me/cvetracker/20678 · Telegram Post
• https://vuldb.com/?submit.525408 · Note
• https://t.me/cveNotify/131977 · Telegram Post
• https://vuldb.com/?id.303055 · Note
• https://t.me/cvedetector/21956 · Telegram Post