cve/2024/CVE-2024-25228.md

CVE-2024-25228

Description

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler.class.php.

POC

Reference

• https://blog.leakix.net/2024/01/vinchin-backup-rce-chain/
• https://blog.leakix.net/2024/01/vinchin-backup-rce-chain/

Github

• https://github.com/Chocapikk/My-CVEs
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/rkraper339/CVE-2024-25228-POC