CVE-2024-24028

Description

References

• thanhlo.substack.com/p/khai-thac-lo-hong-cve-2024-24028 · Broken Link

More vulnerabilities in likeshop

• CVE-2024-41432MEDIUM 5.3An IP Spoofing vulnerability has been discovered in Likeshop up to 2.5.7.20210811. This issue allows an attacker to replace their real IP ad…
• CVE-2024-5766MEDIUM 4.8A vulnerability was found in Likeshop up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /adm…
• CVE-2024-34949HIGH 8.2SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList…
• CVE-2024-24027HIGH 7.2SQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function DistributionMemberLogic:…
• CVE-2024-0352CRITICAL 9.8A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userF…