CNNVD-202509-2709 Information

CNNVD ID

CNNVD-202509-2709

CVE-2025-10615

  • CNNVD Published: 2025-09-17

Description (Chinese)

itsourcecode E-Commerce Website是itsourcecode开源的一个电子商务网站。 itsourcecode E-Commerce Website 1.0版本存在代码问题漏洞,该漏洞源于对文件/admin/products.php的错误操作,可能导致远程任意文件上传。

Description (English)

Its sourcecode E-Commerce Website is an open-source e-commerce website. Its sourcecodecode E-Commerce Website 1.0 has a code gap, which stems from an error in document/admin/products.php, which could lead to remote uploading of any file.

Hazard Level

High

Vulnerability Type

代码问题

Affected Vendor

itsourcecode

Published

2025-09-17

Last Modified

2026-02-24

References

https://github.com/yihaofuweng/cve/issues/23 https://itsourcecode.com/ https://vuldb.com/?ctiid.324642 https://vuldb.com/?id.324642 https://vuldb.com/?submit.649911

Share on: