CVE-2025-50722 - Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component

CRITICAL

Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component

Published Aug 25, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 0.78%

Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component

No remediation recorded yet.

Weaknesses (1)

CWE-77

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-25713		Advisory
https://github.com/147536951/Qiany1/blob/main/SparkShop.pdf		ExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Aug 25, 2025

Updated Aug 25, 2025

Reserved Jun 16, 2025

Updated Aug 25, 2025

Status Analyzed

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Aug 25, 2025

Updated Aug 25, 2025

Exploited since n/a