CVE-2024-40425

EUVD-2024-38453
File Upload vulnerability in Nanjin Xingyuantu Technology Co Sparkshop (Spark Mall B2C Mall v.1.1.6 and before allows a remote attacker to execute arbitrary code via the contorller/common.php component.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
Affected Products (NVD)
VendorProductVersion
sparkshopsparkshop
𝑥
< 1.1.7
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
nanjing_xingyuantu_technologysparkshop
𝑥
≤ 1.1.6
ADP
Common Weakness Enumeration
References
https://gist.github.com/J1rrY-learn/26524d4714a81cf2d64583069e96f765
https://gist.github.com/J1rrY-learn/26524d4714a81cf2d64583069e96f765