Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2024-0739

Hecheng Leadshop leadshop.php deserialization

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability, which was classified as critical, was found in Hecheng Leadshop up to 1.4.20. Affected is an unknown function of the file /web/leadshop.php. The manipulation of the argument install leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-251562 is the identifier assigned to this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hecheng Leadshop

  • 1.4.0affected
  • 1.4.1affected
  • 1.4.2affected
  • 1.4.3affected
  • 1.4.4affected
  • 1.4.5affected
  • 1.4.6affected
  • 1.4.7affected
  • 1.4.8affected
  • 1.4.9affected
  • 1.4.10affected
  • 1.4.11affected
  • 1.4.12affected
  • 1.4.13affected
  • 1.4.14affected
  • 1.4.15affected
  • 1.4.16affected
  • 1.4.17affected
  • 1.4.18affected
  • 1.4.19affected
  • 1.4.20affected

References