Volerion logoVolerion
Volerion logoVolerion

Sparkshop Insecure Permissions Vulnerability Allowing Arbitrary Code Execution

Vulnerability

A vulnerability in Sparkshop version 1.1.7 has been identified, allowing remote attackers to execute arbitrary code through the Common.php component. This issue arises from insecure permissions that could be exploited to manipulate code execution on the server.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code on the server where Sparkshop is hosted.

Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
4.7
remediation
0.0
relevance
0.4
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.