← CVE Intelligence

CVE-2024-1264

Juanpao JPShop UploadsController.php actionUpdate unrestricted upload PUBLISHED

Description (CNA)

A vulnerability has been found in Juanpao JPShop up to 1.5.02 and classified as critical. Affected by this vulnerability is the function actionUpdate of the file /api/controllers/common/UploadsController.php. The manipulation of the argument imgage leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-253003.

Affected (CNA)

Vendor / productVersions
Juanpao / JPShopaffected 1.5.02

CWE

CWE-434

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.