An arbitrary file upload vulnerability in the gok4 method of inxedu v2024.4 allows attackers to execute arbitrary code via uploading a crafted .jsp file.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/35080.txt | Third Party Advisory |
https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/35080.txt | Third Party Advisory |
https://www.inxedu.com/ | Product |
https://www.inxedu.com/ | Product |
Configurations
History
20 Jun 2025, 19:19
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:inxedu:inxedu:2024.4:*:*:*:*:*:*:* | |
First Time |
Inxedu
Inxedu inxedu |
|
References | () https://www.inxedu.com/ - Product | |
References | () https://github.com/cxcxcxcxcxcxcxc/cxcxcxcxcxcxcxc/blob/main/cxcxcxcxcxc/about-2024/35080.txt - Third Party Advisory |
23 May 2024, 19:16
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-05-23 19:16
Updated : 2025-06-20 19:19
NVD link : CVE-2024-35080
Mitre link : CVE-2024-35080
JSON object : View
Products Affected
inxedu
- inxedu
CWE
No CWE.