CVEvulnerability

CVE-2024-41924

7.2 HIGH Published 2024-07-30 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-07-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-349

Description

Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series. If this vulnerability is exploited, an attacker who obtained the administrative privilege may install an arbitrary PHP package. If the obsolete versions of PHP packages are installed, the product may be affected by some known vulnerabilities.

Related

Weakness · CWE (1)

  • CWE-349 Acceptance of Extraneous Untrusted Data With Trusted Data weakness

References