CVE-2024-47946

If the attacker has access to a valid Poweruser session, remote code execution is possible because specially crafted valid PNG files with injected PHP content can be uploaded as desktop backgrounds or lock screens. After the upload, the PHP script is available in the web root. The PHP code execut...

CVE-2024-47946

creationtimestamp| type| source ---|---|--- 2024-12-10 07:51:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113627436345378507 2024-12-10 09:56:53+00:00| seen| https://t.me/cvedetector/12485...

CVE-2024-47946

The software Image Access Scan2Net is vulnerable to remote code execution (RCE) in versions 7.40 and earlier , 7.42 and earlier , and 7.42B and earlier . An attacker with access to a valid Poweruser session can upload specially crafted PNG files containing injected PHP content to be used as deskt...

CVE-2024-47946 OS Command Execution through Arbitrary File Upload

If the attacker has access to a valid Poweruser session, remote code execution is possible because specially crafted valid PNG files with injected PHP content can be uploaded as desktop backgrounds or lock screens. After the upload, the PHP script is available in the web root. The PHP code execut...