CVE-2024-22724

A security vulnerability exists in osCommerce v4 that allows local attackers to bypass file upload restrictions. This flaw is triggered via the administrator profile photo upload feature , which can lead to the execution of arbitrary code . As a temporary workaround, it is recommended to disable ...