A file disclosure vulnerability exists in Sage 1000 v7.0.0. This vulnerability allows remote attackers to retrieve arbitrary files from the server's file system by manipulating the URL parameter in HTTP requests. The attacker can exploit this flaw to access sensitive information, including configuration files that may contain credentials and system settings, which could lead to further compromise of the server.
References
| Link | Resource |
|---|---|
| https://github.com/hx381/Sage-1000-v7.0.0-Exploit/blob/main/README.md | Exploit Third Party Advisory |
Configurations
History
27 Jun 2025, 19:49
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/hx381/Sage-1000-v7.0.0-Exploit/blob/main/README.md - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:sage:sage_frp_1000:7.0.0:*:*:*:*:*:*:* | |
| First Time |
Sage
Sage sage Frp 1000 |
Information
Published : 2024-10-30 18:15
Updated : 2025-06-27 19:49
NVD link : CVE-2024-48647
Mitre link : CVE-2024-48647
CVE.ORG link : CVE-2024-48647
JSON object : View
Products Affected
sage
- sage_frp_1000
CWE
CWE-552
Files or Directories Accessible to External Parties