First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-51055

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An issue Hoosk v1.7.1 allows a remote attacker to execute arbitrary code via a crafted script to the config.php component.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
hoosk	hoosk	1.7.1

References

https://github.com/havok89/Hoosk/issues/66Exploit, Issue Tracking, Third Party Advisory

Timeline

Published: Nov 8, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-510586.2Local File Inclusion (LFI) vulnerability has been discovered in TCPDF 6.7.5. This vulnerability enables a user to read arbitrary files from CVE-2024-51068.8A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects un CVE-2024-510609.1Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'a_id' parameter.CVE-2024-510639.1Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter CVE-2024-510649.8Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection via the tid parameter to admin/queries.php.CVE-2024-510659.8Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter.CVE-2024-510667.5An Insecure Direct Object Reference (IDOR) vulnerability in appointment-detail.php in Phpgurukul's Beauty Parlour Management System v1.1 all CVE-2024-51076.5A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management System 1.0. This issue a CVE-2024-510725.3An issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to cause a Denial of Service (DoS) via EC CVE-2024-510736.7An issue in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to control or disrupt CAN communication b CVE-2024-510746.7Incorrect access control in KIA Seltos vehicle instrument cluster with software and hardware v1.0 allows attackers to arbitrarily change odo CVE-2024-510756.1A Reflected Cross Site Scripting (XSS) vulnerability was found in /odms/admin/user-search.php in PHPGurukul Online DJ Booking Management Sys

CVE-2024-51055: Medium severity, CVSS 6.5 | Vulnix