CVE-2025-9841: code-projects Mobile Shop Management System AddNewProduct.php unrestricted upload

Published Sep 2, 2025

Updated

A security vulnerability has been detected in code-projects Mobile Shop Management System 1.0. This affects an unknown function of the file AddNewProduct.php. The manipulation of the argument ProductImage leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Affected Software

2 affected components

Code-projects Mobile Shop Management System

Fabian Mobile Shop Management System=1.0

Event History

Sep 2, 2025

CVE Published

via MITRE·11:32 PM

Data Sourced

via MITRE·11:32 PM

DescriptionSeverityWeakness

Sep 3, 2025

Data Sourced

via NVD·12:15 AM

DescriptionSeverityWeaknessAffected Software

Feb 27, 57989

Event

via FIRST·10:02 PM

Frequently Asked Questions

What is the severity of CVE-2025-9841?

CVE-2025-9841 is considered a high severity vulnerability due to its potential for unrestricted remote file upload.

How do I fix CVE-2025-9841?

To fix CVE-2025-9841, implement proper file type validation and restrict allowed file extensions in the AddNewProduct.php function.

What is affected by CVE-2025-9841?

CVE-2025-9841 affects the Mobile Shop Management System 1.0 developed by code-projects, particularly the AddNewProduct.php file.

Can CVE-2025-9841 be exploited remotely?

Yes, CVE-2025-9841 can be exploited remotely, allowing attackers to upload malicious files.

What type of vulnerability is CVE-2025-9841?

CVE-2025-9841 is a file upload vulnerability that leads to unrestricted file uploads in the application.