CVE-2025-10615

27th percentile - higher than 27% of all known CVEs

A vulnerability was identified in itsourcecode E-Commerce Website 1.0. This impacts an unknown function of the file /admin/products.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly available and might be used.

Unrestricted file upload may allow an attacker to upload malicious code and compromise the server. Public exploit availability increases the risk of rapid exploitation.

Restrict access to the admin panel, validate and limit uploaded file types, and consider updating or replacing the vulnerable software.