PT-2025-35779 · Phpgurukul · Phpgurukul Online Shopping Portal
CVE-2025-57148
·
Published
2025-09-03
·
Updated
2025-09-08
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
phpgurukul Online Shopping Portal version 2.0
Description
phpgurukul Online Shopping Portal version 2.0 contains an arbitrary file upload issue in the
/admin/insert-product.php component. This is due to missing extension validation, allowing for potentially malicious file uploads.Recommendations
As a temporary workaround, restrict access to the
/admin/insert-product.php file to minimize the risk of exploitation.
Implement robust extension validation to ensure only authorized file types are uploaded.Exploit
Fix
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Phpgurukul Online Shopping Portal