CVE-2024-0352 Scanner
CVE-2024-0352 scanner - Arbitrary File Upload vulnerability in Likeshop
Used 3.4k times · 4.2k assets checked · domain, ipv4, subdomain
CVE
CVE-2024-0352
9.8
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250120.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
likeshop
Updated Nov 7, 2026View on NVD →
S4E scanner
Monitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →