High severity7.5NVD Advisory· Published May 7, 2024· Updated Apr 15, 2026

CVE-2024-34523

Description

AChecker 1.5 allows remote attackers to read the contents of arbitrary files via the download.php path parameter by using Unauthenticated Path Traversal. This occurs through readfile in PHP. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Piuppi/Proof Of Conceptsreferences
Atutor/Acheckerllm-fuzzy
Range: = 1.5

Patches

Vulnerability mechanics

References

github.com/inclusive-design/AChecker/blob/main/checker/download.phpnvd
github.com/piuppi/Proof-of-Concepts/blob/main/AChecker/CVE-2024-34523.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000