CVE-2024-25228

Published: Mar 14, 2024

Modified: Nov 4, 2025

PUBLISHED

Description

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler.class.php.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://blog.leakix.net/2024/01/vinchin-backup-rce-chain/

20240313 [Full Disclosure] CVE-2024-25228: Unpatched Command Injection in Vinchin Backup & Recovery Versions 7.2 and Earlier

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-25228

Description

Affected Products

References