CVE-2025-1946: Hzmanyun Education And Training System

Critical severity, CVSS 9.8. EPSS: 5.2% chance of exploitation in the next 30 days.

A vulnerability was found in hzmanyun Education and Training System 2.1. It has been rated as critical. Affected by this issue is the function exportPDF of the file /user/exportPDF. The manipulation of the argument id leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

• Hzmanyun Education And Training System: version 2.1 only

Published 2025-03-04. Last modified 2026-06-17.