CVE-2024-24725
HIGHGibbon < 26.0.00 - Authenticated PHP Deserialization via columnOrder Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2024-24725.
PoCs published by Ali Maharramli_Fikrat Guliev_Islam Rzayev, MelkorW, including Metasploit module exploits/multi/http/gibbon_auth_rce_cve_2024_24725.
AI-analyzed exploit summary This exploit leverages a PHP deserialization vulnerability in Gibbon LMS v26.0.00 to achieve remote code execution (RCE). It authenticates, generates a malicious payload, and sends it via a crafted multipart/form-data request to trigger command execution.
Description
Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the modules/System%20Admin/import_run.php&type=externalAssessment&step=4 URI.
Exploits (3)
This exploit leverages a PHP deserialization vulnerability in Gibbon LMS v26.0.00 to achieve remote code execution (RCE). It authenticates, generates a malicious payload, and sends it via a crafted multipart/form-data request to trigger command execution.
This repository contains a functional PHP exploit for CVE-2024-24725, targeting the Gibbon School Management System. The exploit chains authentication bypass with RCE via crafted multipart/form-data requests to the import_run.php endpoint.
This Metasploit module exploits a PHP deserialization vulnerability in Gibbon School Platform (CVE-2024-24725) to achieve remote code execution. It authenticates, uploads a malicious payload via a crafted POST request, and executes arbitrary commands.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H