CVE-2025-2035

Name of the Vulnerable Software and Affected Versions s-a-zhd Ecommerce-Website-using-PHP version 1.0

Description A critical issue was found in the software, affecting some unknown functionality of the file /customer register.php. The manipulation of the name argument leads to unrestricted upload. This issue can be exploited remotely.

Recommendations For version 1.0, consider restricting access to the /customer register.php file until a fix is available, and avoid using the name argument in this context to minimize the risk of exploitation.