CVE-2024-58313 xbtitFM 4.1.18 Insecure File Upload in file_hosting Feature
Authenticated administrators can upload malicious PHP files to execute arbitrary code via the file_hosting feature.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-58313?
CVE-2024-58313 is a high-severity vulnerability in xbtitFM, published on 11 Dec 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
xbtitFM 4.1.18 contains an insecure file upload vulnerability that allows authenticated attackers with administrative privileges to upload and execute arbitrary PHP code through the file_hosting feature. Attackers can bypass file type restrictions by modifying the Content-Type header to image/gif, adding GIF89a magic bytes, and using alternate PHP tags to upload web shells that execute system commands.
Weakness: CWE-434
Which versions are affected by CVE-2024-58313?
It affects 1 product.
Products include Xbtitfm Xbtitfm.
How do I fix CVE-2024-58313?
No fix has been published for CVE-2024-58313 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-58313 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-58313 exists.
Other vulnerabilities in xbtitFM
Sources
Also known as GHSA-7v2x-vj66-5pgm.