MEDIUM🇵🇱 Wersja polska

CVE-2024-57685

CVSS 5.3v3.1pub. 2025-02-24upd. 2025-03-25

An issue in sparkshop v.1.1.7 and before allows a remote attacker to execute arbitrary code via a crafted phar file.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

  • Sparkshop

    APP
    Sparkshop
    ≤ 1.1.7
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2025-50722CRITICAL9.8PL ✓ten sam produkt

RCE w Sparkshop v.1.1.7 — podatność w komponencie Common.php

CVE-2024-40425CRITICAL9.8PL ✓ten sam produkt

Krytyczna podatność File Upload umożliwiająca RCE w Sparkshop

CVE-2024-46307HIGH7.5ten sam produkt

A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of produ...

CVE-2024-48107MEDIUM6.5ten sam produkt

SparkShop <=1.1.7 is vulnerable to server-side request forgery (SSRF). This vulnerability allows attacks to sc...