CVE-2024-0414

Name of the Vulnerable Software and Affected Versions DeShang DSCMS versions up to 3.1.2/7.1

Description A vulnerability has been found in DeShang DSCMS, affecting an unknown function of the file public/install.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Recommendations For DeShang DSCMS versions up to 3.1.2/7.1, consider restricting access to the public/install.php file until a patch is available. As a temporary workaround, consider disabling unknown functions in the public/install.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.