Canto < 3.0.7 - Unauthenticated Remote Code Execution
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2024-25096. PoCs published by puppetma4ster.
AI-analyzed exploit summary This repository contains a functional Metasploit module that exploits CVE-2024-25096 and CVE-2023-3452, which are remote file inclusion vulnerabilities in the WordPress Canto plugin. The exploit leverages unsanitized parameters (`abspath` and `wp_abspath`) to achieve remote code execution when PHP's `allow_url_include` is enabled.
Description
Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This issue affects Canto: from n/a through 3.0.7.
Exploits (2)
This repository contains a functional Metasploit module that exploits CVE-2024-25096 and CVE-2023-3452, which are remote file inclusion vulnerabilities in the WordPress Canto plugin. The exploit leverages unsanitized parameters (`abspath` and `wp_abspath`) to achieve remote code execution when PHP's `allow_url_include` is enabled.
This repository contains a functional Metasploit exploit module for CVE-2024-25096, targeting an unauthenticated file upload vulnerability in the Canto WordPress plugin (versions <= 3.0.7). The exploit leverages RFI (Remote File Inclusion) to achieve RCE by serving a malicious PHP payload via an HTTP server.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H