High severity8.8NVD Advisory· Published Feb 20, 2019· Updated Jun 17, 2026
CVE-2019-8954
CVE-2019-8954
Description
In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter (in conjunction with the id parameter) in a upd_jxcode=true action to the ndxzstudio/?a=system URI.
Affected products
2- Range: = 2.1.5
- Range: = 2.1.5
Patches
Vulnerability mechanics
References
1- www.iwantacve.cn/index.php/archives/112/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.