Jeanmarc77 · 123Solar · CVE-2024-9275
**Name of the Vulnerable Software and Affected Versions**
jeanmarc77 123solar versions up to 1.8.4.5
**Description**
A critical issue affects the processing of the file /admin/admin invt2.php. The manipulation of the argument `PROTOCOLx` leads to file inclusion. This issue can be exploited remotely.
**Recommendations**
For versions up to 1.8.4.5, as a temporary workaround, consider restricting access to the /admin/admin invt2.php file until a patch is available. Avoid manipulating the `PROTOCOLx` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.