CVE-2024-8164

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was determined in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This affects the function rename of the file /Admin/Http/Controllers/FileManagerController.php. This manipulation of the argument new_name causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.6.0 is able to mitigate this issue. The affected component should be upgraded.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284 CWE-434

Affected software

Vendor	Product	Versions
Chengdu Everbrite Network Technology	BeikeShop	1.5.0; 1.5.1; 1.5.2; 1.5.3; 1.5.4; 1.5.5
beikeshop	chengdu_everbrite_network_technology	>= 1.5.0, <= 1.5.5

References

https://github.com/DeepMountains/zzz/blob/main/CVE4-2.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.275762Permissions Required
https://vuldb.com/?id.275762Third Party Advisory
https://vuldb.com/?submit.393375Third Party Advisory

Timeline

Published: Aug 26, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-81656.5A vulnerability was identified in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This vulnerability affects the function export CVE-2024-81664.9A vulnerability has been found in Ruijie EG2000K 11.1(6)B2 and classified as critical. This vulnerability affects unknown code of the file /CVE-2024-81679.8A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /CVE-2024-81689.8A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been declared as critical. Affected by this vulnerability CVE-2024-81699.8A vulnerability was found in code-projects Online Quiz Site 1.0. It has been rated as critical. Affected by this issue is some unknown funct CVE-2024-81709.8A vulnerability classified as problematic has been found in SourceCodester Zipped Folder Manager App 1.0. This affects an unknown part of th CVE-2024-81719.8A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. This vulnerability affects unknown code of CVE-2024-81726.1A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Attendance System 1.0. This issue affects som CVE-2024-81737.5A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the CVE-2024-81746.1A vulnerability has been found in code-projects Blood Bank System 1.0 and classified as problematic. Affected by this vulnerability is an un CVE-2024-81757.5An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.CVE-2024-81767.5A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When pa