bjmy18 issues

Repositories
Issues
Comments

Results 2 issues of


                                            bjmy18

Unauthorized access to the online examination system

1、Log in to the teacher account, edit it in student management, capture the package, delete the cookie, and still be able to access it. Unauthorized access is found ![Image](https://github.com/user-attachments/assets/f44d40d0-b2e1-454a-89c9-1b0493fcbc67) ![Image](https://github.com/user-attachments/assets/aa2eadec-5a67-45a2-b888-dfbe84af5fa7)...

CSRF exists in oasys sticky notes

1、During the function point test, it was found that there was a user panel ![Image](https://github.com/user-attachments/assets/372fa69f-a49a-424e-9408-661dee109592) 2、I found that it has the function of writing sticky notes ![Image](https://github.com/user-attachments/assets/a90c63bd-6378-4bb2-8f52-c218c4a87505) 3、Use admin account...