Exploit for Valve-Press-CVE-2024-27956-RCE

kitploit · 2026-08-25

Description

SQL injection in Valve Press (CVE-2024-27956) enabling remote code execution.

Affected Valvepress Automatic versions

Valvepress Automatic≤ 3.92.0

All known vulnerabilities by product

Valvepress Automatic Wordpress

CVSS 9.9 for CVE-2024-27956

9.9

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:LOW

Integrity:HIGH

Availability:LOW

CVE Information

Exploit Details

Modified:2026-08-25 20:36

Last Seen:2026-08-26 03:22

Reporter:KitPloit

Tags

Valve PressSQL InjectionRemote Code ExecutionCVE-2024-27956tools

Other exploits for CVE-2024-27956

wordpress-CVE-2024-27956

2026-08-31 KitPloitKITPLOIT

CVE-2024-27956-WORDPRESS-RCE-PLUGIN

2026-08-31 KitPloitKITPLOIT

2026-08-31 KitPloitKITPLOIT

CVE-2024-27956-RCE-File-Package

2026-08-31 KitPloitKITPLOIT

CVE-2024-27956-RCE

2026-08-31 KitPloitKITPLOIT

CVE-2024-27956-RCE

2026-08-30 KitPloitKITPLOIT

2026-08-30 KitPloitKITPLOIT

2026-08-30 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-HITAZURANAHIRO-VALVE-PRESS-CVE-2024-27956-RCE
# Valve-Press-CVE-2024-27956-RCE

Valve Press — CVE-2024-27956-RCE — SQL-инъекция