Medium severity5.4NVD Advisory· Published Mar 11, 2025· Updated Jun 17, 2026
CVE-2024-51320
CVE-2024-51320
Description
Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /servlet/gsdm_fsave_htmltmp, /servlet/gsdm_btlk_openfile components
Affected products
32.4+ 2 more
- (no CPE)range: 2.4
- cpe:2.3:a:zucchetti:ad_hoc_infinity:2.4:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
1- members.backbox.org/zucchetti-ad-hoc-infinity-multiple-vulnerabilities/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.