writeups.xyz / A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108)

Submitter : c2a

Date: 23 January 2024

Bounty : undisclosed

Vulnerabilities :

• DLP Software
• SQL Injection
• OS Command Injection
• RCE
• Security Code Review

Programs :

• GTB Technologies

Authors :

• X-C3LL (@TheXC3LL)

Link :
https://adepts.of0x.cc/gtbcc-pwned/