Lucene search
GeeeeeeeekJava Shop
2 matches found
CVE-2024-50652
A file upload vulnerability in java_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function.
6.3CVSS7AI score0.00055EPSS
CVE-2024-50651
java_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter.
6.5CVSS6.4AI score0.00088EPSS