EUVD-2019-17216

Malware in sbrugna...

PT-2019-18702

Name of the Vulnerable Software and Affected Versions inxedu through 2018-12-24 Description The issue allows an attacker to upload a malicious JSP file. This is achieved by exploiting the fileType parameter in the /video/uploadvideo API endpoint to modify the list of acceptable file extensions fr...

CVE-2019-7684: Unrestricted Upload of File with Dangerous Type

inxedu through 2018-12-24 has a vulnerability that can lead to the upload of a malicious JSP file. The vulnerable code location is com.inxedu.os.common.controller.VideoUploadControllergok4 com/inxedu/os/common/controller/VideoUploadController.java. The attacker uses the /video/uploadvideo fileTyp...