https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-35570.htmlhttps://patchthecve.com/cve/CVE-2024-35570.htmlWed, 17 Jun 2026 07:35:02 +0000CRITICAL 9.8: An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execute arbitrary code via uploading a crafted jsp file.https://patchthecve.com/cve/CVE-2024-35080.htmlhttps://patchthecve.com/cve/CVE-2024-35080.htmlWed, 17 Jun 2026 07:34:20 +0000CRITICAL 9.8: An arbitrary file upload vulnerability in the gok4 method of inxedu v2024.4 allows attackers to execute arbitrary code via uploading a crafted .jsp file.https://patchthecve.com/cve/CVE-2024-35079.htmlhttps://patchthecve.com/cve/CVE-2024-35079.htmlWed, 17 Jun 2026 07:34:20 +0000CRITICAL 9.8: An arbitrary file upload vulnerability in the uploadAudio method of inxedu v2024.4 allows attackers to execute arbitrary code via uploading a crafted .jsp file.