61 matches found
CVE-2024-35080
An arbitrary file upload vulnerability in the gok4 method of inxedu v2024.4 allows attackers to execute arbitrary code via uploading a crafted .jsp file...
CVE-2024-35080
Inxedu v2024.4 contains an arbitrary file upload vulnerability in the gok4 method that allows remote code execution by uploading a crafted .jsp file. CVE-2024-35080 is ranked CRITICAL (CVSS 3.1: 9.8) with network access, no authentication, and no user interaction required. The underlying issue is...
CVE-2024-35080
An arbitrary file upload vulnerability in the gok4 method of inxedu v2024.4 allows attackers to execute arbitrary code via uploading a crafted .jsp file...
CVE-2024-35570
An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execute arbitrary code via uploading a crafted jsp file...
CVE-2024-35570
An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execute arbitrary code via uploading a crafted jsp file...
PT-2024-26307 · Inxedu · Inxedu
Name of the Vulnerable Software and Affected Versions: inxedu version 2024.4 Description: The issue allows attackers to execute arbitrary code by uploading a crafted .jsp file through the uploadAudio method. Recommendations: For inxedu version 2024.4, consider disabling the uploadAudio method unt...
inxedu 安全漏洞
Inxedu inxedu is a set of open source online education platform from China's Inxu Times Inxedu company. The platform includes an online school system, a live broadcasting system, an examination system and a marketing website. inxedu v2.0.6 version of a security vulnerability , the vulnerability...
PT-2024-26309 · Inxedu · Inxedu
Name of the Vulnerable Software and Affected Versions: inxedu version 2024.4 Description: The issue allows attackers to execute arbitrary code by uploading a crafted .jsp file, exploiting an arbitrary file upload vulnerability in the gok4 method. Recommendations: For inxedu version 2024.4, consid...
PT-2024-26551 · Inxedu · Inxedu
Name of the Vulnerable Software and Affected Versions: inxedu version 2.0.6 Description: The issue is related to an arbitrary file upload vulnerability in the ImageUploadController.class component. This allows attackers to execute arbitrary code by uploading a crafted jsp file. Recommendations: F...
inxedu 安全漏洞
Inxedu inxedu is a set of open source online education platform from China's Inxu Times Inxedu company. The platform includes an online school system, a live streaming system, an exam system and a marketing website. A security vulnerability exists in inxedu v2024.4. An attacker can exploit the...
CVE-2020-21152
SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunction...
CVE-2020-21152
SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunction...
Sql injection
SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunction...
CVE-2020-21152
The CVE-2020-21152 entry concerns inxedu 2.0.6 with a SQL injection in the /saverolefunction API via the functionIds parameter. The vulnerability could allow arbitrary command execution and carries a high impact (CVSS v3.1: 9.8, CRITICAL). Public details in the provided documents specify the vuln...
inxedu SQL注入漏洞
Inxedu inxedu is a set of open source online education platform of China Inxedu Inxedu company. The platform includes an online school system, a live broadcasting system, an examination system and a marketing website. Inxedu 2.0.6 version of the SQL injection vulnerability , the vulnerability ste...
PT-2023-11577 · Inxedu · Inxedu
Name of the Vulnerable Software and Affected Versions: inxedu version 2.0.6 Description: The issue allows attackers to execute arbitrary commands via the functionIds parameter to the "/saverolefunction" API endpoint. This enables attackers to potentially access and manipulate sensitive data...
CVE-2020-21152
SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunction...
CVE-2020-35326
SQL Injection vulnerability in file /inxedu/demoinxeduopen/src/main/resources/mybatis/inxedu/website/WebsiteImagesMapper.xml in inxedu 2.0.6 via the id value...