CVE-2024-28265

IBOS v4.5.5 has an arbitrary file deletion vulnerability via \system\modules\dashboard\controllers\LoginController.php.

CVSS v3.1

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS

0.46% chance of exploitation in the next 30 days, 38th percentile

Published

2024-11-01

Updated

2024-11-06

Proof-of-concept exploits (1)

• A7cc/cve/issues/1

References

• CVE Record
• NVD entry

Related

• CVE-2025-1812
• CVE-2025-1815
• CVE-2025-5247
• CVE-2026-3965
• CVE-2024-2826
• CVE-2024-2827