EUVD-2019-17216

Malware in sbrugna...

CVE-2019-7684: Unrestricted Upload of File with Dangerous Type

inxedu through 2018-12-24 has a vulnerability that can lead to the upload of a malicious JSP file. The vulnerable code location is com.inxedu.os.common.controller.VideoUploadControllergok4 com/inxedu/os/common/controller/VideoUploadController.java. The attacker uses the /video/uploadvideo fileTyp...