CVE-2024-35079

An arbitrary file upload vulnerability in the uploadAudio method of inxedu v2024.4 allows attackers to execute arbitrary code via uploading a crafted .jsp file...

CVE-2024-35079

An arbitrary file upload vulnerability in the uploadAudio method of inxedu v2024.4 allows attackers to execute arbitrary code via uploading a crafted .jsp file...

CVE-2024-35079

An arbitrary file upload vulnerability in the uploadAudio method of inxedu v2024.4 allows attackers to execute arbitrary code via uploading a crafted .jsp file...

CVE-2024-35079

The inxedu online education platform (version 2024.4 ) is vulnerable to an arbitrary file upload vulnerability in its uploadAudio method. An attacker can exploit this by uploading a specially crafted .jsp file to achieve arbitrary code execution . To mitigate this risk, it is recommended to disab...