CVE-2024-48760
CRITICALGestioIP 3.5.7 - Remote Code Execution via Malicious File Upload
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2024-48760.
PoCs published by Maximiliano Belino, maxibelino, odeez24, including Metasploit module exploits/multi/http/gestioip_rce.
AI-analyzed exploit summary This exploit targets CVE-2024-48760 in GestioIP 3.5.7, achieving RCE by uploading a malicious Perl CGI script via an authenticated API endpoint. The script then executes arbitrary commands, including a reverse shell payload.
Description
An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function. The attacker can upload a malicious perlcmd.cgi file that overwrites the original upload.cgi file, enabling remote command execution.
Exploits (2)
This exploit targets CVE-2024-48760 in GestioIP 3.5.7, achieving RCE by uploading a malicious Perl CGI script via an authenticated API endpoint. The script then executes arbitrary commands, including a reverse shell payload.
This Metasploit module exploits a file upload vulnerability in GestioIP 3.5.7, allowing remote command execution via a malicious Perl script. It supports both authenticated and unauthenticated exploitation depending on the target configuration.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H