CVE-2025-9841

A security vulnerability has been detected in code-projects Mobile Shop Management System 1.0. This affects an unknown function of the file AddNewProduct.php. The manipulation of the argument ProductImage leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Score

CVSS 3.1 8.8 High

Status

Analyzed - cna@vuldb.com

Published

2025-09-03

Last modified

2025-09-03

Weaknesses

CWE-284, CWE-434

Affected products

• Mobile Shop Management System (Code-projects)
• Mobile Shop Management System (Fabian)

References

• https://code-projects.org/
• https://github.com/chen2496088236/CVE/issues/2
• https://vuldb.com/?ctiid.322188
• https://vuldb.com/?id.322188
• https://vuldb.com/?submit.641779