mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-13 01:44:43 +02:00
704 B
704 B
CVE-2024-24724
Description
Gibbon through 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig template engine (messengerSettings.php) without sanitization.
POC
Reference
Github
No PoCs found on GitHub currently.