Description
Ilevia EVE X1 服务器固件版本v4.7.18.0.eden及Logic v6.00 -2025_07_21之前及之前存在的问题，允许远程攻击者通过ping.php组件执行任意代码，无法对IP参数进行安全过滤
ilevia EVE X1 Server 远程命令执行 CVE-2025-60738
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/iSee857/ilevia-EVE-X1-Server
https://nvd.nist.gov/vuln/detail/CVE-2025-60738
https://ddpoc.com/DVB-2025-10365.html
https://access.redhat.com/security/cve/cve-2025-60738
https://cvefeed.io/vuln/detail/CVE-2025-60738
https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-60738
https://www.cyberhub.blog/cves/CVE-2025-60738
https://app.opencve.io/cve/?vendor=ilevia&product=eve_x1_server