CVE-2024-48760

Published: 2025-01-14T22:15Z

Last Modified: 2025-01-23T17:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function. The attacker can upload a malicious perlcmd.cgi file that overwrites the original upload.cgi file, enabling remote command execution. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt