← All advisories

Critical severity9.8NVD Advisory· Published Mar 25, 2024· Updated Jul 9, 2026

CVE-2024-28386

CVE-2024-28386

Description

An issue in Home-Made.io fastmagsync v.1.7.51 and before allows a remote attacker to execute arbitrary code via the getPhpBin() component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Home Made/Fastmag Sync
cpe:2.3:a:home-made:fastmag_sync:*:*:*:*:*:prestashop:*:*
Range: <=1.7.51
Home-Made.io/fastmagsynccpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=1.7.51

Patches

Vulnerability mechanics

References

3

security.friendsofpresta.org/modules/2024/03/19/fastmagsync.htmlnvdThird Party Advisory
reference1.example.com/modules/fastmagsync/crons/cron_mutualise_job_queue.phpnvdBroken Link
www.home-made.io/module-fastmag-sync-prestashop/nvdProduct

News mentions

0

No linked articles in our index yet.