4 matches found
CVE-2024-35570
An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execute arbitrary code via uploading a crafted jsp file...
9.8CVSS7.7AI score0.00894EPSS
SaveExploits1References3
CVE-2024-35570
An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execute arbitrary code via uploading a crafted jsp file...
9.8CVSS7.4AI score0.00894EPSS
SaveExploits1References1
CVE-2024-35570
The inxedu online education platform, specifically version 2.0.6 , is affected by an arbitrary file upload vulnerability in the \controller\ImageUploadController.class component. An attacker can exploit this flaw by uploading a specially crafted JSP file to achieve arbitrary code execution . To m...
9.8CVSS8.1AI score0.00894EPSS
SaveExploits1References1Affected Software1
20