CVE-2024-54761

MEDIUM

BigAnt Office Messenger 5.6.06 - SQL Injection via dev_code Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2024-54761. PoCs published by Nicat Abbasov, nscan9.

AI-analyzed exploit summary This exploit leverages a SQL injection vulnerability in BigAnt Office Messenger 5.6.06 to upload a PHP webshell, enabling remote command execution. It includes authentication, token handling, and a shell interface for post-exploitation.

Description

BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter.

Exploits (2)

exploitdb WORKING POC
by Nicat Abbasov · pythonwebappsmultiple
https://www.exploit-db.com/exploits/52412

This exploit leverages a SQL injection vulnerability in BigAnt Office Messenger 5.6.06 to upload a PHP webshell, enabling remote command execution. It includes authentication, token handling, and a shell interface for post-exploitation.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: BigAnt Office Messenger 5.6.06
Auth required
Prerequisites: Valid credentials for the target application · Network access to the target server
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WORKING POC 1 stars
by nscan9 · poc
https://github.com/nscan9/CVE-2024-54761

This PoC exploits a SQL injection vulnerability in BigAnt Office Messenger 5.6.06 to achieve remote code execution by uploading a PHP webshell. The exploit authenticates with default credentials, injects a malicious SQL payload to write a shell, and provides interactive command execution.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: BigAnt Office Messenger 5.6.06
Auth required
Prerequisites: Network access to the target · Valid credentials (default admin:123456 used) · SQLi vulnerability in dev_code parameter
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Scores

CVSS v3 6.3
EPSS 0.0173
EPSS Percentile 74.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-89
Status published
Products (1)
bigantsoft/bigant_office_messenger_5 5.6.0.6
Published Jan 09, 2025
Tracked Since Feb 18, 2026