CVE-2024-35079 - Arbitrary File Upload Leads to Remote Code Execution in Inxedu v2024.4
In June 2024, a serious security flaw was discovered in Inxedu v2024.4, a widely used educational management system. This vulnerability, now cataloged as CVE-2024-35079,
CVE-2024-35090 - Exploiting SQL Injection in J2EEFAST v2.7.’s SysUreportFileMapper.xml
In June 2024, a dangerous SQL injection vulnerability, now designated CVE-2024-35090, was disclosed in J2EEFAST v2.7.. This issue affects the findPage function defined in
CVE-2024-35091 - Exploiting SQL Injection in J2EEFAST v2.7. via the `findPage` Function
In June 2024, a serious SQL injection vulnerability dubbed CVE-2024-35091 was disclosed for the open-source enterprise rapid development framework J2EEFAST version 2.7.. This bug
CVE-2024-35086 - Critical SQL Injection in J2EEFAST v2.7. via BpmTaskFromMapper.xml `findPage` Function
A critical SQL Injection vulnerability has been discovered in J2EEFAST version 2.7., tracked as CVE-2024-35086. The issue exists in the findPage function of BpmTaskFromMapper.
CVE-2024-35085 - SQL Injection in J2EEFAST v2.7. via ProcessDefinitionMapper.xml — What You Need to Know
In June 2024, a critical security vulnerability, CVE-2024-35085, was discovered in J2EEFAST v2.7.. This flaw allows attackers to perform SQL injection through the findPage
Episode
00:00:00
00:00:00