High severity7.2NVD Advisory· Published Dec 11, 2025· Updated Jun 17, 2026
CVE-2024-58313
CVE-2024-58313
Description
xbtitFM 4.1.18 contains an insecure file upload vulnerability that allows authenticated attackers with administrative privileges to upload and execute arbitrary PHP code through the file_hosting feature. Attackers can bypass file type restrictions by modifying the Content-Type header to image/gif, adding GIF89a magic bytes, and using alternate PHP tags to upload web shells that execute system commands.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/51909nvdExploitThird Party AdvisoryVDB Entry
- www.vulncheck.com/advisories/xbtitfm-insecure-file-upload-in-filehosting-featurenvdThird Party Advisory
- xbtitfm.eunvdProduct
News mentions
0No linked articles in our index yet.