CVE-2025-13423: Campcodes Retro Basketball Shoes Online Store admin_product.php unrestricted upload
A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/adminproduct.php. Executing a manipulation of the argument productimage can lead to unrestricted upload. The attack may be launched remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13423?
CVE-2025-13423 has been classified as a high severity vulnerability due to the potential for unrestricted file upload.
How do I fix CVE-2025-13423?
To remediate CVE-2025-13423, validate and sanitize the product_image input in the /admin/admin_product.php file.
What type of vulnerability is CVE-2025-13423?
CVE-2025-13423 is identified as a file upload vulnerability.
Can CVE-2025-13423 be exploited remotely?
Yes, CVE-2025-13423 can be exploited remotely, allowing attackers to manipulate inputs from a distance.
What software is affected by CVE-2025-13423?
CVE-2025-13423 affects Campcodes Retro Basketball Shoes Online Store version 1.0.