← All advisories

Critical severity9.8NVD Advisory· Published Jun 13, 2024· Updated Jun 17, 2026

CVE-2024-38295

CVE-2024-38295

Description

ALCASAR before 3.6.1 allows still_connected.php remote code execution.

Affected products

3

ALCASAR/ALCASAR3 versions
cpe:2.3:a:alcasar:alcasar:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:alcasar:alcasar:*:*:*:*:*:*:*:*range: <3.6.1
- (no CPE)
- (no CPE)range: <3.6.1

Patches

Vulnerability mechanics

References

2

adullact.net/frs/download.php/file/8930/CHANGELOG.mdnvdProductRelease Notes
alcasar.net/downloadnvdProduct

News mentions

0

No linked articles in our index yet.