CVE-2024-8163

Chengdu Everbrite Network Technology BeikeShop files destroyFiles path traversal

State: Published
Severity: 5.3 Medium
Published: Aug 26, 2024
Updated: Nov 24, 2025
Reserved: Aug 26, 2024

Description

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/file_manager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 1.6.0 can resolve this issue. You should upgrade the affected component.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P	VulDB
3.1	5.4 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C	VulDB
3.0	5.4 Medium	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C	VulDB
2.0	5.5 Medium	AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:OF/RC:C	VulDB

Weaknesses

CWE-22 Path Traversal

Affected Products

Product	Versions
BeikeShopChengdu Everbrite Network Technology	1.5.0Affected 1.5.1Affected 1.5.2Affected 1.5.3Affected 1.5.4Affected 1.5.5Affected 1.6.0Not affected

References

VDB-275761 | Chengdu Everbrite Network Technology BeikeShop files destroyFiles path traversalvdb-entrytechnical-description
VDB-275761 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
Submit #393374 | Chengdu Guangda Network Technology BeikeShop <=v1.5.5 Arbitrary File Deletionthird-party-advisory
https://github.com/DeepMountains/zzz/blob/main/CVE4-1.mdexploit

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.