Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

CVE-2024-36598

🗓️ 14 Jun 2024 00:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 74 Views🌐 WEB

Arbitrary file upload in Aegon Life v1.

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
zdt
zdt		AEGON LIFE v1.0 Life Insurance Management System - Remote Code Execution Vulnerability
14 Jun 202400:00
–zdt
cnnvd
CNNVD		Aegon Life Security Breach
14 Jun 202400:00
–cnnvd
cvelist
Cvelist		CVE-2024-36598
14 Jun 202400:00
–cvelist
exploitdb
Exploit DB		AEGON LIFE v1.0 Life Insurance Management System - Unauthenticated Remote Code Execution (RCE)
14 Jun 202400:00
–exploitdb
nvd
NVD		CVE-2024-36598
14 Jun 202418:15
–nvd
packetstorm
Packet Storm		AEGON LIFE 1.0 Remote Code Execution
14 Jun 202400:00
–packetstorm
ptsecurity
Positive Technologies		PT-2024-27089 · Unknown · Aegon Life
13 Jun 202400:00
–ptsecurity
rapid7
Rapid7 Vulnerability Database (full)		CVE-2024-36598: Improper Control of Generation of Code
14 Jun 202400:00
–rapid7
redhatcve
RedhatCVE		CVE-2024-36598
23 May 202509:19
–redhatcve
vulnrichment
Vulnrichment		CVE-2024-36598
14 Jun 202400:00
–vulnrichment
Vulnrichment
Node
projectworldslife_insurance_management_systemMatch1.0
ParameterPositionPathDescriptionCWE
fileToUploadupload data/lims/insertClient.phpArbitrary PHP file upload in insertClient.php leading to remote code execution via uploaded PHP shell.CWE-94
cmdquery param/lims/uploads/shell2.gif.phpAccess to uploaded PHP shell to execute commands via the cmd parameter.CWE-94

Loginsoft_Inc

#DOYOUKNOWCVE Critical Vulnerability! CVE-2024-36598: An arbitrary file upload vulnerability identified in Aegon Life v1.0. This vulnerability allows attackers to execute arbitrary code on the target system by uploading a maliciously crafted image file. Due to improper input validation, the system fails to prevent the execution of uploaded files, giving attackers a chance to gain unauthorized access and control over the system This exploit, identified as Exploit-DB #52045, highlights critical flaws that could permit unauthorized access to private information. Learn more from LOVI: https://t.co/zTnDl9RaCz Stay updated and stay Secure! #CyberSecurity #Vulnerability #Aegon #RCE #Exploit #Hotfix #Mitigation #Compromisedata #fileupload #cybersecurityawareness #cybersecuritynews

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 07:37Current
7.8High risk
Vulners AI Score7.8
CVSS 3.18.1
EPSS0.00581
SSVC
CWE-94
arbitrary file uploadaegon lifecode execution
74