cve/2024/CVE-2024-31705.md

CVE-2024-31705

Description

An issue in Infotel Conseil GLPI v.10.X.X and after allows a remote attacker to execute arbitrary code via the insufficient validation of user-supplied input.

POC

Reference

• https://github.com/V3locidad/GLPI_POC_Plugins_Shell
• https://github.com/V3locidad/GLPI_POC_Plugins_Shell
• https://seclists.org/fulldisclosure/2024/Apr/23
• https://seclists.org/fulldisclosure/2024/Apr/23

Github

• https://github.com/V3locidad/V3locidad