ExploitPublished
CorgetGpsDget 2_3.2 · OS Command Injection
Source Exploit-DB RSS Feed
0
Severity
HighRated by Threat Radar
Data as of 10 Sep 2026, 23:08 UTC
What to do
AI-suggested
Until a patch is available, restrict network access to the vulnerable HTTP service to trusted users only. Monitor for suspicious HTTP requests containing unusual or malformed 'Target' headers. If possible, disable or isolate the SendEmail handler to prevent exploitation.
Description
CorgetGpsDget 2_3.2 - OS Command Injection
Indicators of compromise
Exploit source code
# Exploit Title: CorgetGpsDget 2_3.2 - OS Command Injection
# Date: 2026-07-05
# Exploit Author: Bytetobreach
# Fofa server: "PTTServer"
# Vendor Homepage: http://corget.com
# Version: GpsDget 2_3.2, build 2020-09-01 (dget.version); product line Gps2.0
# Tested on Ubuntu. Binary reversed on Ghidra Debian.
# Sink is in http/HttpHandler.cpp CHttpHandler::SendEmail
# CVE: pending (requested)
#
# Description:
# HTTP service (Server: PTTServer) unauthenticated handler reachable by SendEmail
# met…References
Community reviews
Loading reviews…