Description
An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of ShopSite v14.0 allows attackers to execute arbitrary code via uploading a crafted SVG file.
Medium · 6.1
CVE-2024-22550
EUVD-2024-20086GHSA-9xx5-8h94-vx2v
An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of ShopSite v14.0 allows attackers to execute arbitrary code…
Published Jan 26, 2024 · Updated Aug 29, 2024 · Assigned by mitre