Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 03/04/2024 Updated: 03/04/2024

Gibbon up to and including 26.0.00 allows /modules/School%20Admin/messengerSettings.php Server Side Template Injection leading to Remote Code Execution because input is passed to the Twig template engine (messengerSettings.php) without sanitization.

Check Point Reference: CPAI-2024-0160 Date Published: 7 Apr 2024 Severity: High ...

Gibbon version 26000 suffers from a server-side template injection vulnerability that allows for remote code execution ...

https://gibbonedu.org/download/https://packetstormsecurity.com/files/177857 https://nvd.nist.gov https://packetstormsecurity.com/files/177857/Gibbon-26.0.00-Server-Side-Template-Injection-Remote-Code-Execution.html https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2024-0160.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-24724

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect