CVE-2024-51319

A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimgupload.jsp...

CVE-2024-51319

A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimgupload.jsp...

CVE-2024-51319

Zucchetti Ad Hoc Infinity version 2.4 is affected by a local file inclusion (LFI) vulnerability within the /servlet/Report component. This flaw allows an authenticated attacker to achieve Remote Code Execution (RCE) by uploading a JSP web or reverse shell via the /jsp/zimg_upload.jsp endpoint. Pr...