Csdeshang

Dsshop

2 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-0417

Exploit
  • EPSS 0.16%
  • Veröffentlicht 11.01.2024 18:15:44
  • Zuletzt bearbeitet 21.11.2024 08:46:32

A vulnerability, which was classified as critical, was found in DeShang DSShop up to 2.1.5. This affects an unknown part of the file application/home/controller/MemberAuth.php. The manipulation of the argument member_info leads to path traversal: '.....

9.8

CVE-2024-0412

  • EPSS 0.28%
  • Veröffentlicht 11.01.2024 17:15:08
  • Zuletzt bearbeitet 21.11.2024 08:46:31

A vulnerability was found in DeShang DSShop up to 3.1.0. It has been declared as problematic. This vulnerability affects unknown code of the file public/install.php of the component HTTP GET Request Handler. The manipulation leads to improper access ...