What’s Vulnerable › Vulnerabilities

CVE-2024-8164: Chengdu Everbrite Network Technology BeikeShop FileManagerController.php rename unrestricted upload

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-08-26 · updated 2026-06-17
• Weakness: CWE-284

Description

A vulnerability was determined in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This affects the function rename of the file /Admin/Http/Controllers/FileManagerController.php. This manipulation of the argument new_name causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.6.0 is able to mitigate this issue. The affected component should be upgraded.

Affected products

• Chengdu Everbrite Network Technology BeikeShop: through 1.5.5

References

• https://github.com/DeepMountains/zzz/blob/main/CVE4-2.md
• https://vuldb.com/?ctiid.275762
• https://vuldb.com/?id.275762
• https://vuldb.com/?submit.393375

Get alerted when CVE-2024-8164 or the next vulnerability affects your stack