Approved changes feed: RSS · Atom

cpe:2.3:a:geeeeeeeek:java_shop:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorGeeeeeeeek (1e7541f5-c00c-5245-a133-011c78b6ac1a)
ProductJava Shop (472de4b5-73f9-5b99-aa39-b03ce53db199)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/geeeeeeeek/java_shop purl2cpe 2026-06-01 10:11:16.910298

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-50652 vulnerable 2026-06-08 06:52:11.361877 Details available
A file upload vulnerability in java_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function.
Published: 2024-11-15T00:00:00.000Z
Updated: 2024-11-21T19:34:07.070Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50651 vulnerable 2026-06-08 06:52:11.361343 Details available
java_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter.
Published: 2024-11-15T00:00:00.000Z
Updated: 2024-11-27T20:23:31.755Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.