Approved changes feed: RSS · Atom

cpe:2.3:a:formosasoft:ee_class:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFormosasoft (330f7402-7f30-5c1f-8317-0000a70330e9)
ProductEe Class (e146779e-cc69-5785-8278-c5e7ab1c045e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9981 vulnerable 2026-06-08 07:00:29.001391 FormosaSoft ee-class - Local File Inclusion
HIGH (8.8)
The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to upload a malicious PHP file first and then exploit this vulnerability to include the file, resulting in arbitrary code execution on the server.
Published: 2024-10-15T07:57:31.598Z
Updated: 2024-10-15T13:54:14.734Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9980 vulnerable 2026-06-08 07:00:29.000204 FormosaSoft ee-class - SQL Injection
HIGH (8.8)
The ee-class from FormosaSoft does not properly validate a specific page parameter, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify and delete database contents.
Published: 2024-10-15T07:52:48.554Z
Updated: 2024-10-15T13:56:27.287Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.