Description
An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execute arbitrary code via uploading a crafted jsp file.
Critical · 9.8
CVE-2024-35570
EUVD-2024-35373
An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execut…
Published May 23, 2024 · Updated Feb 13, 2025 · Assigned by mitre