CVE-2024-51319

A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimgupload.jsp...

CVE-2024-51319

The ERP software Zucchetti Ad Hoc Infinity version 2.4 contains a local file include vulnerability within the /servlet/Report component. This flaw allows an authenticated attacker to achieve Remote Code Execution (RCE) by uploading a JSP web/reverse shell via the /jsp/zimg_upload.jsp endpoint. A ...

CVE-2024-51319

A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimgupload.jsp...