Skip to content
OpenAdvisories

Product · FormosaSoft

ee-class

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-9981

    FormosaSoft ee-class - Local File Inclusion

    The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to upload a malicious PHP file first and then exploit this vulnerability to include the file, resulting in arbitrary code exe…

    FormosaSoft ee-class
  • High 8.8
    CVE-2024-9980

    FormosaSoft ee-class - SQL Injection

    The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify and delete database contents.

    FormosaSoft ee-class