Jamarketplace
Approved changes feed: RSS · Atom
cpe:2.3:a:prestashopmodules:jamarketplace:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Prestashopmodules (6954bee6-326b-52c0-abfb-fb21c631f82a) |
|---|---|
| Product | Jamarketplace (ef293368-8a3a-5177-a94f-b9198c7e12d6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-33836 |
vulnerable | 2026-06-08 06:37:32.190699 |
Details available
In the module "JA Marketplace" (jamarketplace) up to version 9.0.1 from JA Module for PrestaShop, a guest can upload files with extensions .php. In version 6.X, the method `JmarketplaceproductModuleFrontController::init()` and in version 8.X, the method `JmarketplaceSellerproductModuleFrontController::init()` allow upload of .php files, which will lead to a critical vulnerability.
Published: 2024-06-19T00:00:00.000Z
Updated: 2024-08-02T02:42:58.699Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.