CVE-2025-11320

A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. Impacted is the function uploadFile of the file src/main/java/com/education/core/controller/UploadController.java. Such manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

• CWE-284
• CWE-434

• https://github.com/xkalami-Tta0/CVE/blob/main/wisdom-education/%E5%89%8D%E5%8F%B0%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md
• https://github.com/xkalami-Tta0/CVE/blob/main/wisdom-education/%E5%89%8D%E5%8F%B0%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md#vulnerability-reproduction
• https://vuldb.com/?ctiid.327201
• https://vuldb.com/?id.327201
• https://vuldb.com/?submit.664392

Published

Oct 6, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11315A vulnerability was found in Tipray 厦门天锐科技股份有限公司 Data Leakag…9.8
• CVE-2025-11316A vulnerability was determined in Tipray 厦门天锐科技股份有限公司 Data L…9.8
• CVE-2025-11317A vulnerability was identified in Tipray 厦门天锐科技股份有限公司 Data L…9.8
• CVE-2025-11318A security flaw has been discovered in Tipray 厦门天锐科技股份有限公司 D…9.8
• CVE-2025-11319A weakness has been identified in nahiduddinahammed Hospital…6.3
• CVE-2025-1132A time-based blind SQL Injection vulnerability exists in the…8.8
• CVE-2025-11321A vulnerability was detected in zhuimengshaonian wisdom-educ…4.3
• CVE-2025-11322A flaw has been found in Mangati NovoSGA up to 2.2.12. The i…3.7
• CVE-2025-11323A vulnerability was determined in UTT 1250GW up to v2v3.2.2-…8.8
• CVE-2025-11324A vulnerability was identified in Tenda AC18 15.03.05.19(631…8.8
• CVE-2025-11325A security flaw has been discovered in Tenda AC18 15.03.05.1…8.8
• CVE-2025-11326A weakness has been identified in Tenda AC18 15.03.05.19(631…8.8