critical9.8
CVE-2024-35570
An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execute arbitrary code via…
Impact
An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execute arbitrary code via uploading a crafted jsp file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Inxedu | Inxedu | Version 2.0.6 |