KakeruJ

2 exploits Active since May 2024

CVE-2024-35570 WRITEUP CRITICAL WRITEUP

Inxedu - Unrestricted File Upload

An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execute arbitrary code via uploading a crafted jsp file.

CVSS 9.8

View Code

CVE-2024-40322 WRITEUP HIGH WRITEUP

JFinalCMS <5.0.0 - SQL Injection

An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data

CVSS 8.8

View Code