CVE-2024-11680
CRITICAL KEV NUCLEIProjectSend < r1720 - Unauthenticated Configuration Modification via options.php
Title source: llmExploitation Summary
CVE-2024-11680 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added December 3, 2024.
EIP tracks 4 public exploits from researchers including iSee857, D3N14LD15K, qucklecrabik, including a Metasploit module exploits/linux/http/projectsend_unauth_rce.
A Nuclei detection template is also available.
AI-analyzed exploit summary The repository contains functional exploit code for CVE-2024-11680, specifically targeting Altenergy with a SQL injection vulnerability. The script sends a crafted payload to the '/index.php/display/status_zigbee' endpoint and checks for a specific response pattern to confirm exploitation.
Description
ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Remote, unauthenticated attackers can exploit this flaw by sending crafted HTTP requests to options.php, enabling unauthorized modification of the application's configuration. Successful exploitation allows attackers to create accounts, upload webshells, and embed malicious JavaScript.
Exploits (4)
The repository contains functional exploit code for CVE-2024-11680, specifically targeting Altenergy with a SQL injection vulnerability. The script sends a crafted payload to the '/index.php/display/status_zigbee' endpoint and checks for a specific response pattern to confirm exploitation.
This repository contains a functional PoC exploit for CVE-2024-11680, targeting an improper authentication flaw in ProjectSend r1605 and older versions. The exploit demonstrates privilege misconfiguration by modifying the application title, enabling insecure options, and registering a new user.
This repository contains a functional Python exploit for CVE-2024-11680, targeting ProjectSend. The exploit chains CSRF token bypass, insecure client registration, and unrestricted file upload to achieve unauthenticated remote code execution via a PHP web shell.
This Metasploit module exploits an improper authorization vulnerability in ProjectSend (r1295-r1605) to achieve unauthenticated remote code execution by enabling user registration, disabling file extension restrictions, and uploading a malicious PHP file.
Nuclei Templates (1)
http.html:"projectsend" || http.html:"projectsend setup" || http.html:"provided by projectsend"
body="projectsend" || body="projectsend setup" || body=provided by projectsend
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H