BaseFortify

Publication date: 2025-10-27

Last updated on: 2026-04-29

Assigner: VulDB

Description

A vulnerability was found in ashymuzuro Full-Ecommece-Website and Muzuro Ecommerce System up to 1.1.0. This affects an unknown part of the file /admin/index.php?add_product of the component Add Product Page. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-27

Last Modified

2026-04-29

Generated

2026-07-06

AI Q&A

2025-10-27

EPSS Evaluated

2026-07-05

NVD

CVE-2025-12291

Affected Vendors & Products

Vendor	Product	Version / Range
ashymuzuro	muzuro_ecommerce_system	1.1.0
ashymuzuro	full-ecommece-website	1.1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-434	The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Add Product Page (/admin/index.php?add_product) of ashymuzuro Full-Ecommece-Website and Muzuro Ecommerce System up to version 1.1.0. It allows an attacker to perform an unrestricted upload, meaning they can upload files without proper restrictions or validation. The attack can be performed remotely, and the exploit has been made public.

Impact Analysis

The vulnerability can lead to unauthorized file uploads, which may allow attackers to upload malicious files to the server. This can result in compromise of the system's confidentiality, integrity, and availability, potentially leading to data breaches, defacement, or disruption of services.

Hi! I’m here to help you understand CVE-2025-12291. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70