CVE-2024-0417

A vulnerability, which was classified as critical, was found in DeShang DSShop up to 2.1.5. This affects an unknown part of the file application/home/controller/MemberAuth.php. The manipulation of the argument memberinfo leads to path traversal: '../filedir'. It is possible to initiate the attack...

CVE-2024-0417 DeShang DSShop MemberAuth.php path traversal

A vulnerability, which was classified as critical, was found in DeShang DSShop up to 2.1.5. This affects an unknown part of the file application/home/controller/MemberAuth.php. The manipulation of the argument memberinfo leads to path traversal: '../filedir'. It is possible to initiate the attack...

CVE-2024-0417 DeShang DSShop MemberAuth.php path traversal

A vulnerability, which was classified as critical, was found in DeShang DSShop up to 2.1.5. This affects an unknown part of the file application/home/controller/MemberAuth.php. The manipulation of the argument memberinfo leads to path traversal: '../filedir'. It is possible to initiate the attack...

CVE-2024-0417

CVE-2024-0417 affects DeShang DSShop up to version 2.1.5, with a path traversal flaw in application/home/controller/MemberAuth.php triggered by manipulating the member_info argument. This vulnerability could be exploited remotely, and public disclosures exist. Multiple connected sources corrobora...