CVE-2025-2651: SourceCodester Online Eyewear Shop admin exposure of information through directory listing
First published: Sun Mar 23 2025(Updated: )
A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /oews/admin/. The manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. Multiple sub-directories are affected.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Online Eyewear Shop |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-2651?
CVE-2025-2651 is classified as problematic due to its potential for information exposure through directory listing.
How do I fix CVE-2025-2651?
To mitigate CVE-2025-2651, restrict directory listing and ensure proper configuration of the file permissions on the server.
Which software is affected by CVE-2025-2651?
CVE-2025-2651 affects SourceCodester Online Eyewear Shop version 1.0.
What type of vulnerability is CVE-2025-2651?
CVE-2025-2651 is an information exposure vulnerability that allows remote attackers to access sensitive directory listings.
Can CVE-2025-2651 be exploited remotely?
Yes, CVE-2025-2651 can be exploited remotely by an attacker to expose information through directory listings.
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/first-publish-date
- agent/type
- agent/description
- agent/references
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/author
- agent/severity
- agent/event
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/sourcecodester
- canonical/sourcecodester online eyewear shop