Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Loading CVE intelligence

Loading vulnerability catalog

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

CVE-2025-24801

HighPublished

GLPI allows authenticated remote code execution

Published: Mar 18, 2025
Updated: Mar 18, 2025
Assigning CNA: GitHub_M
Evidence observed: Aug 8, 2026

Primary CVSS

8.8/ 10High

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS probability estimate

21.0%

Moderate · next 30 days

Percentile: 97.5%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

GLPI is a free asset and IT management software package. An authenticated user can upload and force the execution of *.php files located on the GLPI server. This vulnerability is fixed in 10.0.18.

Sources

CVE-2025-24801PoC
Proof-of-concept exploit for CVE-2025-24801, an LFI-to-RCE vulnerability in GLPI 10.0.17. Automates login, enables PHP uploads, and uploads a reverse shell for authorized security testing.
Exploit-CVE-2025-24801Exploit
Python exploit for CVE-2025-24801 achieving Remote Code Execution via Local File Inclusion in GLPI 10.0.17. Includes command execution mode for post-exploitation.
CVE-2025-24799Exploit
Unauthenticated SQL injection exploit for GLPI versions before 10.0.18, enabling database enumeration, credential extraction, and API token exfiltration via the /index.php/ajax/ endpoint.

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.