CVE-2024-0412

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in DeShang DSShop up to 3.1.0. It has been declared as problematic. This vulnerability affects unknown code of the file public/install.php of the component HTTP GET Request Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250432.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

Vendor	Product	Versions
DeShang	DSShop	3.0; 3.1

References

https://note.zhaoj.in/share/Q56cf5nN9RzFBroken Link
https://vuldb.com/?ctiid.250432Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.250432Permissions Required, Third Party Advisory, VDB Entry
https://note.zhaoj.in/share/Q56cf5nN9RzFBroken Link
https://vuldb.com/?ctiid.250432Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.250432Permissions Required, Third Party Advisory, VDB Entry

Timeline

Published: Jan 11, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-04139.8A vulnerability was found in DeShang DSKMS up to 3.1.2. It has been rated as problematic. This issue affects some unknown processing of the CVE-2024-04149.8A vulnerability classified as problematic has been found in DeShang DSCMS up to 3.1.2/7.1. Affected is an unknown function of the file publi CVE-2024-04159.8A vulnerability classified as critical was found in DeShang DSMall up to 6.1.0. Affected by this vulnerability is an unknown functionality o CVE-2024-04169.8A vulnerability, which was classified as critical, has been found in DeShang DSMall up to 5.0.3. Affected by this issue is some unknown func CVE-2024-04179.8A vulnerability, which was classified as critical, was found in DeShang DSShop up to 2.1.5. This affects an unknown part of the file applica CVE-2024-04187.5A vulnerability has been found in iSharer and upRedSun File Sharing Wizard up to 1.5.0 and classified as problematic. This vulnerability aff CVE-2024-04197.5A vulnerability was found in Jasper httpdx up to 1.5.4 and classified as problematic. This issue affects some unknown processing of the comp CVE-2024-04205.4The MapPress Maps for WordPress plugin before 2.88.15 does not sanitize and escape the map title when outputting it back in the admin dashbo CVE-2024-04215.3The MapPress Maps for WordPress plugin before 2.88.16 is affected by an IDOR as it does not ensure that posts to be retrieve via an AJAX act CVE-2024-04225.4A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been declared as problematic. Affected by this vulner CVE-2024-04235.4A vulnerability was found in CodeAstro Online Food Ordering System 1.0. It has been rated as problematic. Affected by this issue is some unk CVE-2024-04245.4A vulnerability classified as problematic has been found in CodeAstro Simple Banking System 1.0. This affects an unknown part of the file cr