CVE-2024-40425

概要

参考情報

• gist.github.com/J1rrY-learn/26524d4714a81cf2d64583069e96f765 · Broken Link

sparkshop のその他の脆弱性

• CVE-2025-50722緊急 9.8Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component
• CVE-2024-57685中 5.3An issue in sparkshop v.1.1.7 and before allows a remote attacker to execute arbitrary code via a crafted phar file.
• CVE-2024-48107中 6.5SparkShop <=1.1.7 is vulnerable to server-side request forgery (SSRF). This vulnerability allows attacks to scan ports on the Intranet or lo…
• CVE-2024-46307高 7.5A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products.