← Database

CVE-2024-50648

CRITICAL CVSS: 9.8 Published: 2024-11-15 Modified: 2026-06-17

Description

yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files.

Affected Platforms

Guchengwuyue Yshopmall

Weakness Type

CWE-22

References