CVE-2024-58312
HIGHxbtitFM 4.1.18 - Unauthenticated Path Traversal via URL Parameter Manipulation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-58312. PoCs published by h5kj23kj32io2kj.
AI-analyzed exploit summary The exploit demonstrates unauthenticated SQL injection and path traversal vulnerabilities in xbtitFM 4.1.18, along with an authenticated insecure file upload leading to RCE. It includes functional payloads and detailed steps for exploitation.
Description
xbtitFM 4.1.18 contains a path traversal vulnerability that allows unauthenticated attackers to access sensitive system files by manipulating URL parameters. Attackers can exploit directory traversal techniques to read critical system files like using encoded path traversal characters in HTTP requests.
Exploits (1)
The exploit demonstrates unauthenticated SQL injection and path traversal vulnerabilities in xbtitFM 4.1.18, along with an authenticated insecure file upload leading to RCE. It includes functional payloads and detailed steps for exploitation.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N