CVE-2024-48760: Gestioip

Critical severity, CVSS 9.8. EPSS: 45.1% chance of exploitation in the next 30 days.

An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function. The attacker can upload a malicious perlcmd.cgi file that overwrites the original upload.cgi file, enabling remote command execution.

Affected products

• Gestioip Gestioip: version 3.5.7 only

Published 2025-01-14. Last modified 2026-06-17.