CVE-2024-0412 — DeShang DSShop HTTP GET Request install.php access control

Description (CNA)

A vulnerability was found in DeShang DSShop up to 3.1.0. It has been declared as problematic. This vulnerability affects unknown code of the file public/install.php of the component HTTP GET Request Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250432.

Affected (CNA)

Vendor / product	Versions
DeShang / DSShop	affected 3.0; affected 3.1

CWE

CWE-284

References

https://vuldb.com/?id.250432
https://vuldb.com/?ctiid.250432
https://note.zhaoj.in/share/Q56cf5nN9RzF

ADP enrichment

CVE

No English description supplied.

https://vuldb.com/?id.250432
https://vuldb.com/?ctiid.250432
https://note.zhaoj.in/share/Q56cf5nN9RzF

CISA-ADP

No English description supplied.

No references supplied.