critical9.8
CVE-2024-50648
yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files.
Impact
yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Guchengwuyue | Yshopmall | Version 1.0 |