4 matches found
CVE-2024-47946
If the attacker has access to a valid Poweruser session, remote code execution is possible because specially crafted valid PNG files with injected PHP content can be uploaded as desktop backgrounds or lock screens. After the upload, the PHP script is available in the web root. The PHP code execut...
CVE-2024-47946
creationtimestamp| type| source ---|---|--- 2024-12-10 07:51:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113627436345378507 2024-12-10 09:56:53+00:00| seen| https://t.me/cvedetector/12485...
CVE-2024-47946
The CVE-2024-47946 issue affects Image Access Scan2Net software. Descriptions across sources state that remote code execution is possible when an attacker with a valid Poweruser session uploads specially crafted valid PNG files containing injected PHP content as desktop backgrounds or lock screen...
CVE-2024-47946 OS Command Execution through Arbitrary File Upload
If the attacker has access to a valid Poweruser session, remote code execution is possible because specially crafted valid PNG files with injected PHP content can be uploaded as desktop backgrounds or lock screens. After the upload, the PHP script is available in the web root. The PHP code execut...