CVE-2025-13411

Name of the Vulnerable Software and Affected Versions Campcodes Retro Basketball Shoes Online Store version 1.0

Description A flaw exists that allows for unrestricted file uploads. This is possible through manipulation of the product image argument in the /admin/admin football.php file. The attack can be carried out remotely. The exploit has been publicly released.

Recommendations Apply any available updates to address the unrestricted file upload issue in the /admin/admin football.php file. As a temporary workaround, restrict access to the /admin/admin football.php file to authorized personnel only. Avoid uploading untrusted files through the product image argument.