Medium severity6.6NVD Advisory· Published Mar 21, 2024· Updated Jun 17, 2026
CVE-2024-22724
CVE-2024-22724
Description
An issue was discovered in osCommerce v4, allows local attackers to bypass file upload restrictions and execute arbitrary code via administrator profile photo upload feature.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:oscommerce:oscommerce:4.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:oscommerce:oscommerce:4.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: v4
Patches
Vulnerability mechanics
References
2- github.com/osCommerce/osCommerce-V4/issues/62nvdExploitIssue TrackingThird Party Advisory
- medium.com/%40cupc4k3/oscommerce-v4-rce-unveiling-the-file-upload-bypass-threat-f1ac0097880cnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.