CVE-2024-0417

CVE-2024-0417 affects DeShang DSShop up to version 2.1.5, with a path traversal flaw in application/home/controller/MemberAuth.php triggered by manipulating the member_info argument. This vulnerability could be exploited remotely, and public disclosures exist. Multiple connected sources corrobora...

CVE-2024-0412

Affected software: DeShang DSShop up to 3.1.0. Vulnerable component/file: HTTP GET Request Handler, public/install.php. Root cause: improper access controls. Impact: allows remote initiation of exploitation; exploit has been disclosed publicly. Current exploit reliability/availability not quantif...