CVE-2024-11018

Name of the Vulnerable Software and Affected Versions Grand Vice Info Webopac versions up to 6.5.0/7.2.2

Description The issue is related to the lack of proper file type validation in the Webopac component, allowing unauthenticated remote attackers to upload and execute webshells. This could lead to arbitrary code execution on the server, potentially resulting in server compromise.

Recommendations For versions up to 6.5.0/7.2.2, upgrade the affected components immediately to mitigate exposure. As a temporary workaround, consider restricting access to the Webopac component until a patch is available. Avoid using the Webopac component for uploading files until the issue is resolved.