CVE-2025-1947 | hzmanyun Education and Training System 2.1.3 UploadImageController.java scorm param command injection

A vulnerability classified as critical has been found in hzmanyun Education and Training System 2.1.3. This affects the function scorm of the file UploadImageController.java. The manipulation of the argument param leads to command injection.

This vulnerability is uniquely identified as CVE-2025-1947. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.