Exploit for CVE-2024-7954

RCE-CVE-2024-7954 Description The porteplume plugin,...

CVE-2024-7954

The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request...

VulnCheck KEV: CVE-2024-7954

The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request...

CVE-2024-7954

creationtimestamp| type| source ---|---|--- 2024-08-21 13:15:03+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/spipporteplumeprevisurce.rb 2024-08-23 21:19:06+00:00| seen| https://t.me/cvedetector/4034 2024-09-08 11:06:23+00:00|...