VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jan 11, 2024· Updated Jun 17, 2026

CVE-2024-0414

CVE-2024-0414

Description

A vulnerability classified as problematic has been found in DeShang DSCMS up to 3.1.2/7.1. Affected is an unknown function of the file public/install.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-250434 is the identifier assigned to this vulnerability.

Affected products

5
  • Csdeshang/Dscms3 versions
    cpe:2.3:a:csdeshang:dscms:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:csdeshang:dscms:*:*:*:*:*:*:*:*range: >=3.1.0,<=3.1.2
    • cpe:2.3:a:csdeshang:dscms:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:csdeshang:dscms:7.1:*:*:*:*:*:*:*
  • Deshang/DSCMScpe-rescue2 versions
    3.1.0+ 1 more
    • (no CPE)range: 3.1.0
    • (no CPE)range: <=3.1.2/7.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.