Vulnerability Details CVE-2024-50648
yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 76.1%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2024-50648
-
cpe:2.3:a:guchengwuyue:yshopmall:1.0