Ad Hoc Infinity vulnerabilities

2 known vulnerabilities in Ad Hoc Infinity from Zucchetti. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  Ad Hoc Infinity: URL Redirection to Untrusted Site

  CVE-2024-51321Mar 11, 2025Zucchetti

  In Zucchetti Ad Hoc Infinity 2.4, an improper check on the m_cURL parameter allows an attacker to redirect the victim to an attacker-controlled website after the authentication.

• 7.3 High severity

  Ad Hoc Infinity: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2024-51319Mar 11, 2025Zucchetti

  A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimg_upload.jsp.