CVE-2024-48760

Critical · 9.8

CVSS

9.8

EPSS

46.1%

Published

Jan 14, 2025

CISA due date

—

The record

An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function. The attacker can upload a malicious perlcmd.cgi file that overwrites the original upload.cgi file, enabling remote command execution.

Affected packages

Ecosystem	Package	Introduced	Fixed