← All advisories

Critical severity9.8NVD Advisory· Published May 24, 2024· Updated Jun 17, 2026

CVE-2024-35373

CVE-2024-35373

Description

Mocodo Mocodo Online 4.2.6 and below is vulnerable to Remote Code Execution via /web/rewrite.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Mocodo/Mocodo Online3 versions
cpe:2.3:a:mocodo:mocodo_online:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:mocodo:mocodo_online:*:*:*:*:*:*:*:*range: <=4.2.6
- (no CPE)
- (no CPE)range: <=4.2.6
Mocodo/mocodollm-create
Range: <=4.2.6

Patches

Vulnerability mechanics

References

2

chocapikk.com/posts/2024/mocodo-vulnerabilities/nvdExploitThird Party Advisory
github.com/laowantong/mocodo/blob/11ca879060a68e06844058cd969c6379214cc2a8/web/rewrite.phpnvdProduct

News mentions

0

No linked articles in our index yet.