EUVD-2024-16212

Malicious code in bioql PyPI...

CVE-2024-0417 DeShang DSShop MemberAuth.php path traversal

A vulnerability, which was classified as critical, was found in DeShang DSShop up to 2.1.5. This affects an unknown part of the file application/home/controller/MemberAuth.php. The manipulation of the argument memberinfo leads to path traversal: '../filedir'. It is possible to initiate the attack...