{"vulnerability": "CVE-2024-48760", "sightings": [{"uuid": "5a1ec26d-9d18-4691-a291-605344d3b4bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48760", "type": "seen", "source": "https://t.me/cvedetector/15381", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-48760 - GestiolP FTP File Upload Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-48760 \nPublished : Jan. 14, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : An issue in GestiolP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function. The attacker can upload a malicious perlcmd.cgi file that overwrites the original upload.cgi file, enabling remote command execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T00:03:26.000000Z"}, {"uuid": "f99ab61c-3a04-4b6c-b7ca-55daa9891083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48760", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gestioip_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"maxibelino\", \"odeez24\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command execution via file upload.\\n          If GestioIP is configured to use no authentication for admin account,\\n          no password is required to exploit the vulnerability. Otherwise, an authenticated\\n          user with admin right on the web site is required to exploit.\", \"disclosure_date\": \"2025-01-14\", \"fullname\": \"exploit/multi/http/gestioip_rce\", \"is_install_path\": true, \"mod_time\": \"2026-06-03 06:32:04 +0000\", \"name\": \"GestioIP 3.5.7 Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/gestioip_rce.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/gestioip_rce\", \"references\": [\"CVE-2024-48760\", \"EDB-52204\", \"URL-https://github.com/maxibelino/CVEs/tree/main/CVE-2024-48760\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Linux/unix Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:47.710564Z"}]}