Various Vulnerabilities Discovered in Gargaj Wuhu
CVE-2024-6949

5.3MEDIUM

Key Information:

Vendor
Gargaj
Status
Wuhu
Vendor
CVE Published:
21 July 2024

Badges

👾 Exploit Exists🟡 Public PoC

Summary

A vulnerability classified as problematic was found in Gargaj wuhu up to 3faad49bfcc3895e9ff76a591d05c8941273d120. Affected by this vulnerability is an unknown functionality of the file /pages.php?edit=News. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-272071.

Affected Version(s)

wuhu 3faad49bfcc3895e9ff76a591d05c8941273d120

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2024-6949 - Proof of Concept

References

https://vuldb.com/?id.272071
vdb-entry
https://vuldb.com/?ctiid.272071
signaturepermissions-required
https://vuldb.com/?submit.375146
third-party-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dee.Mirage (VulDB User)
.