Cyber Posture

CVE-2024-57687

CriticalPublic PoC

Published: 10 January 2025

Published
10 January 2025
Modified
28 March 2025
KEV Added
Patch
CVSS Score 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0144 80.8th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.

Security Summary

CVE-2024-57687 is an OS Command Injection vulnerability (CWE-78) affecting PHPGurukul Land Record System version 1.0, specifically in the /landrecordsys/admin/dashboard.php component. Published on 2025-01-10, it enables remote attackers to execute arbitrary code by injecting malicious payloads via the "Cookie" GET request parameter. The issue carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), classifying it as critical due to its severe potential impact.

The vulnerability can be exploited by unauthenticated remote attackers over the network with low attack complexity and no user interaction required. Exploitation allows attackers to run arbitrary operating system commands on the affected server, potentially resulting in high-impact compromise of confidentiality, integrity, and availability, such as data theft, modification, or denial of service.

A detailed technical writeup is available at https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/Command%20Injection.pdf, which may offer additional insights into exploitation techniques. No vendor advisories or patches are referenced in the provided information.

Details

CWE(s)
CWE-78

Affected Products

phpgurukul
land record system
1.0

MITRE ATT&CK Enterprise Techniques

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
Why these techniques?

OS Command Injection vulnerability in public-facing web application (/landrecordsys/admin/dashboard.php) allows remote arbitrary code execution via GET parameter, directly enabling T1190: Exploit Public-Facing Application.

References