CVE-2024-0414

A vulnerability classified as problematic has been found in DeShang DSCMS up to 3.1.2/7.1. Affected is an unknown function of the file public/install.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-250434 is the identifier assigned to this vulnerability.

• CWE-284

• https://note.zhaoj.in/share/xYQMsARg83uiBroken Link
• https://vuldb.com/?ctiid.250434Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.250434Permissions Required, Third Party Advisory, VDB Entry
• https://note.zhaoj.in/share/xYQMsARg83uiBroken Link
• https://vuldb.com/?ctiid.250434Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.250434Permissions Required, Third Party Advisory, VDB Entry

Published

Jan 11, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0408A flaw was found in the X.Org server. The GLX PBuffer code d…5.5
• CVE-2024-0409A flaw was found in the X.Org server. The cursor code in bot…7.8
• CVE-2024-0410An authorization bypass vulnerability was discovered in GitL…7.7
• CVE-2024-0411A vulnerability was found in DeShang DSMall up to 6.1.0. It …7.5
• CVE-2024-0412A vulnerability was found in DeShang DSShop up to 3.1.0. It …9.8
• CVE-2024-0413A vulnerability was found in DeShang DSKMS up to 3.1.2. It h…9.8
• CVE-2024-0415A vulnerability classified as critical was found in DeShang …9.8
• CVE-2024-0416A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-0417A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-0418A vulnerability has been found in iSharer and upRedSun File …7.5
• CVE-2024-0419A vulnerability was found in Jasper httpdx up to 1.5.4 and c…7.5
• CVE-2024-0420The MapPress Maps for WordPress plugin before 2.88.15 does n…5.4