File Upload vulnerability in Nanjin Xingyuantu Technology Co Sparkshop (Spark Mall B2C Mall v.1.1.6 and before allows a remote attacker to execute arbitrary code via the contorller/common.php component.
References
| Link | Resource |
|---|---|
| https://gist.github.com/J1rrY-learn/26524d4714a81cf2d64583069e96f765 | Broken Link |
| https://gist.github.com/J1rrY-learn/26524d4714a81cf2d64583069e96f765 | Broken Link |
Configurations
History
28 Apr 2025, 14:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gist.github.com/J1rrY-learn/26524d4714a81cf2d64583069e96f765 - Broken Link | |
| CPE | cpe:2.3:a:sparkshop:sparkshop:*:*:*:*:*:*:*:* | |
| First Time |
Sparkshop sparkshop
Sparkshop |
21 Nov 2024, 09:31
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gist.github.com/J1rrY-learn/26524d4714a81cf2d64583069e96f765 - |
01 Aug 2024, 13:57
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-434 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
17 Jul 2024, 13:34
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
16 Jul 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-16 18:15
Updated : 2025-04-28 14:46
NVD link : CVE-2024-40425
Mitre link : CVE-2024-40425
CVE.ORG link : CVE-2024-40425
JSON object : View
Products Affected
sparkshop
- sparkshop
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type