CVE-2024-9006

ALTO 8.8CVE-2024-9006 · Published 19/09/2024 · updated 17/06/2026

En resumen

CVE-2024-9006 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a 123solar (jeanmarc77).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.69%, mayor que el 53.1% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
123solar jeanmarc77	`= 1.8.4.5`	No fix yet

Description

A vulnerability was found in jeanmarc77 123solar 1.8.4.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file config/config_invt1.php. The manipulation of the argument PASSOx leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The patch is identified as f4a8c748ec436e5a79f91ccb6a6f73752b336aa5. It is recommended to apply a patch to fix this issue.

References

jeanmarc77/123solar commit f4a8c74 · Patch
jeanmarc77/123solar · Exploit
jeanmarc77/123solar · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Más vulnerabilidades de 123solar

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free