Unrestricted File Upload Vulnerability in Juanpao JPShop
CVE-2024-1264

9.8CRITICAL

Key Information:

Vendor: Juanpao
Status: JPShop
Vendor: CVE Published:; 7 February 2024

Badges

👾 Exploit Exists

What is CVE-2024-1264?

A vulnerability exists in the Juanpao JPShop platform prior to version 1.5.02 that allows for unrestricted file uploads via the actionUpdate function located in /api/controllers/common/UploadsController.php. By manipulating the 'imgage' argument, attackers can exploit this weakness remotely, permitting them to upload arbitrary files. This flaw may lead to severe compromises of the web application, allowing for further attack vectors if exploited. Awareness and immediate patches are essential to eliminate potential threats associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch