← Back to browse · API

CVE-2024-5407

Severity
CRITICAL
CVSS
10.0
EPSS
0.00604
Risk score
40.21
CISA KEV
No
PoC
No
Published
2024-05-27
Modified
2024-08-01
First seen
2026-08-08
Aliases
EUVD-2024-46629
Products
SaltOS:RhinOS 3.0-1190
Sources
euvd EUVD-2024-46629

Description

A vulnerability in RhinOS 3.0-1190 could allow PHP code injection through the "search" parameter in /portal/search.htm. This vulnerability could allow a remote attacker to perform a reverse shell on the remote system, compromising the entire infrastructure.

References