Approved changes feed: RSS · Atom

cpe:2.3:a:landray:ekp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLandray (7d575140-c150-5056-9cc4-27a03a6bd9dd)
ProductEkp (5787af72-a07d-5668-9428-e207f6b6bb0a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-11239 vulnerable 2026-06-08 06:23:49.162936 Landray EKP API Interface import.do deleteFile path traversal
MEDIUM (5.4)
A vulnerability has been found in Landray EKP up to 16.0 and classified as critical. This vulnerability affects the function deleteFile of the file /sys/common/import.do?method=deleteFile of the component API Interface. The manipulation of the argument folder leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-11-15T13:31:04.349Z
Updated: 2024-11-15T20:21:15.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11238 vulnerable 2026-06-08 06:23:49.160976 Landray EKP sysUiComponent.do delPreviewFile path traversal
MEDIUM (6.5)
A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0. This affects the function delPreviewFile of the file /sys/ui/sys_ui_component/sysUiComponent.do?method=delPreviewFile. The manipulation of the argument directoryPath leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-11-15T12:31:04.496Z
Updated: 2024-11-15T20:23:10.217Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.