We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
A command injection vulnerability exists in GestioIP 3.0 commit ac67be and earlier in ip_checkhost.cgi. Crafted input to the 'ip' parameter allows attackers to execute arbitrary shell commands on the server via embedded base64-encoded payloads. Authentication may be required depending on deployment configuration.
Reserved 2025-07-30 | Published 2025-07-31 | Updated 2025-07-31 | Assigner VulnCheckCWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
bperry
raw.githubusercontent.com/...its/multi/http/gestioip_exec.rb
sourceforge.net/...ac67be9fce5ee4c0438d27dfa5c1dcbca08c457c/
sourceforge.net/projects/gestioip/
www.vulncheck.com/advisories/gestioip-rce
Support options