CVE-2024-0416

Summary

CVE-2024-0416 is a critical vulnerability affecting DeShang DSMall up to version 5.0.3. This issue lies within the unknown functionality of the file application/home/controller/MemberAuth.php. A path traversal vulnerability is present, which enables attackers to manipulate the argument file_name and gain unauthorized access by traversing directories '../filedir'. The exploit for this vulnerability has been made public, increasing the risk of remote attacks. The identifier for this vulnerability is VDB-250436.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.