Critical severity9.8NVD Advisory· Published Apr 12, 2024· Updated Jun 17, 2026

CVE-2024-31818

Description

Directory Traversal vulnerability in DerbyNet v.9.0 allows a remote attacker to execute arbitrary code via the page parameter of the kiosk.php component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

DerbyNet/DerbyNetdescription
DerbyNet/DerbyNetllm-fuzzy
Range: =9.0

Patches

Vulnerability mechanics

References

chocapikk.com/posts/2024/derbynet-vulnerabilities/nvdExploit
github.com/jeffpiazza/derbynet/blob/1ae0bb55c3990dec8fd9b9f4a82400be9a75de92/website/kiosk.phpnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000