CVE-2025-12291: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in ashymuzuro Full-Ecommece-Website and Muzuro Ecommerce System up to 1.1.0. This affects an unknown part of the file /admin/index.php?addproduct of the component Add Product Page. The manipulation results in unrestricted upload. The attack may be performed from remote...

Full-Ecommece-Website 代码问题漏洞

Full-Ecommece-Website is an e-commerce system MES project by Ashley Muzuro, an individual developer in China. A code issue vulnerability exists in Full-Ecommece-Website version 1.1.0 and earlier, which stems from an unrestricted upload function in the file /admin/index.php?addproduct, which could...