CVE-2024-11018criticalCWE-434

CVE-2024-11018: critical vulnerability in Grand Vice info Webopac

Grand Vice info Webopac - Arbitrary File Upload

Published

Follow this CVE+ Monitor Webopac

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 0.8%
Webopac from Grand Vice info does not properly validate uploaded file types, allowing unauthenticated remote attackers to upload and execute webshells, which could lead to arbitrary code execution on the server.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Grand Vice info · Webopac
Related CVEs — Grand Vice info Webopac

In the same product, most dangerous first.

CVE-2024-11017HIGHGrand Vice info Webopac - Arbitrary File UploadEPSS 0.8%CVE-2024-11016CRITICALGrand Vice info Webopac - SQL InjectionEPSS 0.6%CVE-2024-11021MEDIUMGrand Vice info Webopac - Stored XSSEPSS 0.3%