Lucene search
PRIOn knowledge basePRION:CVE-2024-1262HistoryFeb 06, 2024 - 11:15 p.m.
Out-of-bounds
2024-02-0623:15:00
PRIOn knowledge base
www.prio-n.com
7
out-of-bounds
api component
remote exploit
unrestricted upload
critical vulnerability
vdb-253001
juanpao jpshop 1.5.02
A vulnerability, which was classified as critical, has been found in Juanpao JPShop up to 1.5.02. This issue affects the function actionUpdate of the file /api/controllers/merchant/design/MaterialController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-253001 was assigned to this vulnerability.
