CVE-2025-10615

A vulnerability was identified in itsourcecode E-Commerce Website 1.0. This impacts an unknown function of the file /admin/products.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly available and might be used.

Score

CVSS 3.1 8.8 High

Status

Analyzed - cna@vuldb.com

Published

2025-09-17

Last modified

2025-09-18

Weaknesses

CWE-284, CWE-434

Affected products

• E-commerce Website (Angeljudesuarez)
• E-commerce Website (Itsourcecode)

References

• https://github.com/yihaofuweng/cve/issues/23
• https://itsourcecode.com/
• https://vuldb.com/?ctiid.324642
• https://vuldb.com/?id.324642
• https://vuldb.com/?submit.649911