---
id: 9215
title: "[CVE-2024-22724] OsCommerce v4 RCE: Unveiling the file upload bypass threat"
cve: CVE-2024-22724
source_domain: yokai.hakaisecurity.io
source_url: "https://yokai.hakaisecurity.io/oscommerce-v4-rce-unveiling-the-file-upload-bypass-threat/"
published_at: "2024-06-03T17:09:10Z"
tags: ["rce", "vulnerability-research", "research", "file-upload"]
phying_url: "https://phying.com/item/9215"
lang: en
---

# [CVE-2024-22724] OsCommerce v4 RCE: Unveiling the file upload bypass threat

## Summary

In my recent research, I identified a critical vulnerability in osCommerce v4, specifically a Remote Code Execution (RCE) vulnerability enabled by bypassing file upload restrictions. I’ve always enjoyed testing file upload bypass techniques in my assessments. Vulnerabilities Identified in OsCommerce Version 4 The CVE-2024-22724 was assigned to the discovery of this vulnerability. The issue […]

## Intelligence Metadata

- **Sources:** yokai.hakaisecurity.io
- **CVE:** CVE-2024-22724
- **Published:** 2024-06-03T17:09:10Z
- **Original:** https://yokai.hakaisecurity.io/oscommerce-v4-rce-unveiling-the-file-upload-bypass-threat/
- **Phying News:** https://phying.com/item/9215