Lucene search
K

CVE-2024-0416

🗓️ 11 Jan 2024 17:31:05Reported by VulDBType 
cve
 cve
🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

Vulnerability in DeShang DSMall up to 5.0.3 allowing remote path traversal via file_name parameter

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2024-0416
11 Jan 202417:37
circl
CNNVD
DeShang DSMall Security Breach
11 Jan 202400:00
cnnvd
Cvelist
CVE-2024-0416 DeShang DSMall MemberAuth.php path traversal
11 Jan 202417:31
cvelist
EUVD
EUVD-2024-16211
3 Oct 202520:07
euvd
NVD
CVE-2024-0416
11 Jan 202418:15
nvd
Prion
Path traversal
11 Jan 202418:15
prion
RedhatCVE
CVE-2024-0416
23 May 202509:34
redhatcve
Vulnrichment
CVE-2024-0416 DeShang DSMall MemberAuth.php path traversal
11 Jan 202417:31
vulnrichment
NVD
Vulners
Node
csdeshangdsmallRange5.0.3
[
  {
    "vendor": "DeShang",
    "product": "DSMall",
    "versions": [
      {
        "version": "5.0.0",
        "status": "affected"
      },
      {
        "version": "5.0.1",
        "status": "affected"
      },
      {
        "version": "5.0.2",
        "status": "affected"
      },
      {
        "version": "5.0.3",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
file_namepathapplication/home/controller/MemberAuth.phpPath traversal vulnerability via file_name in MemberAuth.php leading to access to ../filedir or arbitrary paths.CWE-24

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 08:46Current
9.4High risk
Vulners AI Score9.4
CVSS 3.15.4 - 9.8
CVSS 25.5
CVSS 35.4
EPSS0.00181
SSVC
49