{"uuid": "f99ab61c-3a04-4b6c-b7ca-55daa9891083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48760", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gestioip_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"maxibelino\", \"odeez24\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command execution via file upload.\\n          If GestioIP is configured to use no authentication for admin account,\\n          no password is required to exploit the vulnerability. Otherwise, an authenticated\\n          user with admin right on the web site is required to exploit.\", \"disclosure_date\": \"2025-01-14\", \"fullname\": \"exploit/multi/http/gestioip_rce\", \"is_install_path\": true, \"mod_time\": \"2026-06-03 06:32:04 +0000\", \"name\": \"GestioIP 3.5.7 Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/gestioip_rce.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/gestioip_rce\", \"references\": [\"CVE-2024-48760\", \"EDB-52204\", \"URL-https://github.com/maxibelino/CVEs/tree/main/CVE-2024-48760\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Linux/unix Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:47.710564Z"}