Approved changes feed: RSS · Atom

cpe:2.3:a:ashymuzuro:full-ecommece-website:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAshymuzuro (0ffe99b2-4999-5992-9b4d-c1e5512f5e54)
ProductFull Ecommece Website (9af69185-ffcb-5ecc-8817-a547f5809468)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-12291 vulnerable 2026-06-08 07:04:29.988907 ashymuzuro Full-Ecommece-Website/Muzuro Ecommerce System Add Product index.php unrestricted upload
MEDIUM (4.7)
A vulnerability was found in ashymuzuro Full-Ecommece-Website and Muzuro Ecommerce System up to 1.1.0. This affects an unknown part of the file /admin/index.php?add_product of the component Add Product Page. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-10-27T15:32:05.824Z
Updated: 2025-10-30T14:16:42.162Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.