CVE-2025-13423 - CERT CVE
ID CVE-2025-13423
Sažetak A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/admin_product.php. Executing manipulation of the argument product_image can lead to unrestricted upload. The attack may be launched remotely. The exploit has been published and may be used.
Reference
CVSS
Base: 5.8
Impact: 6.4
Exploitability:6.4
Pristup
VektorSloženostAutentikacija
NETWORK LOW MULTIPLE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL PARTIAL
CVSS vektor AV:N/AC:L/Au:M/C:P/I:P/A:P
Zadnje važnije ažuriranje 20-11-2025 - 00:15
Objavljeno 20-11-2025 - 00:15