PT-2025-38275 · Itsourcecode · Itsourcecode E-Commerce Website
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
itsourcecode E-Commerce Website version 1.0
Description
A security flaw has been discovered that allows for unrestricted upload. The issue affects an unknown function within the
/admin/users.php file and can be exploited remotely. The exploit has been released publicly.Recommendations
As a temporary workaround, consider restricting access to the
/admin/users.php file to minimize the risk of exploitation.Exploit
Fix
Improper Access Control
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Itsourcecode E-Commerce Website