4 matches found
CVE-2024-35570
An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execute arbitrary code via uploading a crafted jsp file...
CVE-2024-35570
An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execute arbitrary code via uploading a crafted jsp file...
CVE-2024-35570
An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execute arbitrary code via uploading a crafted jsp file...
CVE-2024-35570
The inxedu online education platform, specifically version 2.0.6 , is affected by an arbitrary file upload vulnerability in the \controller\ImageUploadController.class component. An attacker can exploit this flaw by uploading a specially crafted JSP file to achieve arbitrary code execution . To m...