CVE-2024-8164

CVE-2024-8164 affects Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. The flaw resides in the rename function of /Admin/Http/Controllers/FileManagerController.php, where manipulating the argument new_name enables unrestricted upload. The issue can be triggered remotely and was publicl...

CVE-2024-8165

BeikeShop (Chengdu Everbrite Network Technology) vulnerable up to version 1.5.5 due to a path traversal in the exportZip function of /admin/file_manager/export. The issue arises from manipulation of the path argument, enabling remote exploitation. Public exploit availability is noted; upgrading t...

CVE-2024-8163

BeikeShop (Chengdu Everbrite Network Technology) up to version 1.5.5 is affected by CVE-2024-8163 due to a path traversal in the destroyFiles function under /admin/file_manager/files. The vulnerability can be triggered remotely by manipulating the files argument; public exploit information exists...