CVE-2024-1353

A vulnerability, which was classified as critical, has been found in PHPEMS up to 1.0. Affected by this issue is the function index of the file app/weixin/controller/index.api.php. The manipulation of the argument picurl leads to deserialization. The exploit has been disclosed to the public and may be used. VDB-253226 is the identifier assigned to this vulnerability.

• CWE-502
• CWE-502

• https://note.zhaoj.in/share/nxGzfEB6fFVYBroken Link
• https://vuldb.com/?ctiid.253226Permissions Required, Third Party Advisory
• https://vuldb.com/?id.253226Permissions Required, Third Party Advisory
• https://note.zhaoj.in/share/nxGzfEB6fFVYBroken Link
• https://vuldb.com/?ctiid.253226Permissions Required, Third Party Advisory
• https://vuldb.com/?id.253226Permissions Required, Third Party Advisory

Published

Feb 9, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-13524A vulnerability has been found in obsproject OBS Studio up t…4.5
• CVE-2024-13525The Customer Email Verification for WooCommerce plugin for W…6.5
• CVE-2024-13526The EventPrime – Events Calendar, Bookings and Tickets plugi…4.3
• CVE-2024-13527The Philantro – Donations and Donor Management plugin for Wo…5.4
• CVE-2024-13528The Customer Email Verification for WooCommerce plugin for W…7.5
• CVE-2024-13529The SocialV - Social Network and Community BuddyPress Theme …6.5
• CVE-2024-13530The Custom Login Page Styler – Limit Login Attempts – Restri…4.3
• CVE-2024-13531The ShipEngine Shipping Quotes plugin for WordPress is vulne…7.5
• CVE-2024-13532The Small Package Quotes – Purolator Edition plugin for Word…7.5
• CVE-2024-13533The Small Package Quotes – USPS Edition plugin for WordPress…7.5
• CVE-2024-13534The Small Package Quotes – Worldwide Express Edition plugin …7.5
• CVE-2024-13535The Actionwear products sync plugin for WordPress is vulnera…5.3