Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-34313. PoCs published by vincentscode.
AI-analyzed exploit summary The repository contains a functional exploit for CVE-2024-34313, a path traversal vulnerability in VPL Jail System <4.0.3. The exploit allows arbitrary file writes, leading to privilege escalation by overwriting system files like /etc/ld.so.preload. The provided Python script scans for vulnerable versions and retrieves an admin ticket for exploitation.
Description
An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint.
Exploits (1)
The repository contains a functional exploit for CVE-2024-34313, a path traversal vulnerability in VPL Jail System <4.0.3. The exploit allows arbitrary file writes, leading to privilege escalation by overwriting system files like /etc/ld.so.preload. The provided Python script scans for vulnerable versions and retrieves an admin ticket for exploitation.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H