Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-13423

Опубликовано: 20 нояб. 2025
Источник: nvd
CVSS3: 4.7
CVSS3: 7.2
CVSS2: 5.8
EPSS Низкий

Описание

A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/admin_product.php. Executing manipulation of the argument product_image can lead to unrestricted upload. The attack may be launched remotely. The exploit has been published and may be used.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:campcodes:retro_basketball_shoes_online_store:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 17%
0.00054
Низкий

4.7 Medium

CVSS3

7.2 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-284
CWE-434

Связанные уязвимости

CVSS3: 4.7
github
3 месяца назад

A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/admin_product.php. Executing manipulation of the argument product_image can lead to unrestricted upload. The attack may be launched remotely. The exploit has been published and may be used.

EPSS

Процентиль: 17%
0.00054
Низкий

4.7 Medium

CVSS3

7.2 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-284
CWE-434