CVE-2024-0417

A vulnerability, which was classified as critical, was found in DeShang DSShop up to 2.1.5. This affects an unknown part of the file application/home/controller/MemberAuth.php. The manipulation of the argument member_info leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250437 was assigned to this vulnerability.

• CWE-24

• https://note.zhaoj.in/share/ZpRTCLblKd7NExploit
• https://vuldb.com/?ctiid.250437Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.250437Permissions Required, Third Party Advisory, VDB Entry
• https://note.zhaoj.in/share/ZpRTCLblKd7NExploit
• https://vuldb.com/?ctiid.250437Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.250437Permissions Required, Third Party Advisory, VDB Entry

Published

Jan 11, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0411A vulnerability was found in DeShang DSMall up to 6.1.0. It …7.5
• CVE-2024-0412A vulnerability was found in DeShang DSShop up to 3.1.0. It …9.8
• CVE-2024-0413A vulnerability was found in DeShang DSKMS up to 3.1.2. It h…9.8
• CVE-2024-0414A vulnerability classified as problematic has been found in …9.8
• CVE-2024-0415A vulnerability classified as critical was found in DeShang …9.8
• CVE-2024-0416A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-0418A vulnerability has been found in iSharer and upRedSun File …7.5
• CVE-2024-0419A vulnerability was found in Jasper httpdx up to 1.5.4 and c…7.5
• CVE-2024-0420The MapPress Maps for WordPress plugin before 2.88.15 does n…5.4
• CVE-2024-0421The MapPress Maps for WordPress plugin before 2.88.16 is aff…5.3
• CVE-2024-0422A vulnerability was found in CodeAstro POS and Inventory Man…5.4
• CVE-2024-0423A vulnerability was found in CodeAstro Online Food Ordering …5.4