Juanpao Jpshop vulnerabilities

CVE-2024-1262 [CRITICAL] CWE-434 CVE-2024-1262: A vulnerability, which was classified as critical, has been found in Juanpao JPShop up to 1.5.02. Th A vulnerability, which was classified as critical, has been found in Juanpao JPShop up to 1.5.02. This issue affects the function actionUpdate of the file /api/controllers/merchant/design/MaterialController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. The attack may be initiated remotely. The explo

CVE-2024-1261 [CRITICAL] CWE-434 CVE-2024-1261: A vulnerability classified as critical was found in Juanpao JPShop up to 1.5.02. This vulnerability A vulnerability classified as critical was found in Juanpao JPShop up to 1.5.02. This vulnerability affects the function actionIndex of the file /api/controllers/merchant/app/ComboController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. The attack can be initiated remotely. The exploit has been discl

CVE-2024-1264 [CRITICAL] CWE-434 CVE-2024-1264: A vulnerability has been found in Juanpao JPShop up to 1.5.02 and classified as critical. Affected b A vulnerability has been found in Juanpao JPShop up to 1.5.02 and classified as critical. Affected by this vulnerability is the function actionUpdate of the file /api/controllers/common/UploadsController.php. The manipulation of the argument imgage leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to t

CVE-2024-1260 [CRITICAL] CWE-434 CVE-2024-1260: A vulnerability classified as critical has been found in Juanpao JPShop up to 1.5.02. This affects t A vulnerability classified as critical has been found in Juanpao JPShop up to 1.5.02. This affects the function actionIndex of the file /api/controllers/admin/app/ComboController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclo

CVE-2024-1263 [CRITICAL] CWE-434 CVE-2024-1263: A vulnerability, which was classified as critical, was found in Juanpao JPShop up to 1.5.02. Affecte A vulnerability, which was classified as critical, was found in Juanpao JPShop up to 1.5.02. Affected is the function actionUpdate of the file /api/controllers/merchant/shop/PosterController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has b

CVE-2024-1259 [CRITICAL] CWE-434 CVE-2024-1259: A vulnerability was found in Juanpao JPShop up to 1.5.02. It has been rated as critical. Affected by A vulnerability was found in Juanpao JPShop up to 1.5.02. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/controllers/admin/app/AppController.php of the component API. The manipulation of the argument app_pic_url leads to unrestricted upload. The attack may be launched remotely. The exploit has be

CVE-2024-1258 [MEDIUM] CWE-321 CVE-2024-1258: A vulnerability was found in Juanpao JPShop up to 1.5.02. It has been declared as problematic. Affec A vulnerability was found in Juanpao JPShop up to 1.5.02. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file api/config/params.php of the component API. The manipulation of the argument JWT_KEY_ADMIN leads to use of hard-coded cryptographic key . The complexity of an attack is rather high. The e