CVE-2024-0352

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250120.

• CWE-434

• https://note.zhaoj.in/share/ciwYj7QXC4sZBroken Link
• https://vuldb.com/?ctiid.250120Permissions Required, Third Party Advisory
• https://vuldb.com/?id.250120Third Party Advisory
• https://note.zhaoj.in/share/ciwYj7QXC4sZBroken Link
• https://vuldb.com/?ctiid.250120Permissions Required, Third Party Advisory
• https://vuldb.com/?id.250120Third Party Advisory

Published

Jan 9, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0346A vulnerability has been found in CodeAstro Vehicle Booking …5.4
• CVE-2024-0347A vulnerability was found in SourceCodester Engineers Online…3.7
• CVE-2024-0348A vulnerability was found in SourceCodester Engineers Online…6.5
• CVE-2024-0349A vulnerability was found in SourceCodester Engineers Online…5.3
• CVE-2024-0350A vulnerability was found in SourceCodester Engineers Online…6.5
• CVE-2024-0351A vulnerability classified as problematic has been found in …3.5
• CVE-2024-0353Local privilege escalation vulnerability potentially allowed…7.8
• CVE-2024-0354A vulnerability, which was classified as critical, has been …7.5
• CVE-2024-0355A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-0356A vulnerability has been found in Mandelo ssm_shiro_blog 1.0…7.5
• CVE-2024-0357A vulnerability was found in coderd-repos Eva 1.0.0 and clas…9.8
• CVE-2024-0358A vulnerability was found in DeShang DSO2O up to 4.1.0. It h…7.5