Submit #562717: sparkshop <=v1.1.7 Code Injectioninfo

Titlesparkshop <=v1.1.7 Code Injection
DescriptionThe uploadFile in SparkShop system v1.1.7 allows for arbitrary file uploads, enabling arbitrary code execution
Source⚠️ https://github.com/147536951/Qiany1/blob/main/SparkShop.pdf
User
 Qianyi (UID 71159)
Submission04/20/2025 17:30 (1 Year ago)
Moderation05/04/2025 08:56 (14 days later)
StatusDuplicate
VulDB entry271403 [Nanjing Xingyuantu Technology SparkShop up to 1.1.6 /api/Common/uploadFile unrestricted upload]
Points0

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!