CVE-2025-13544
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-11-23

Last updated on: 2026-04-29

Assigner: VulDB

Description
A weakness has been identified in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected is an unknown function of the file /customer_register.php. Executing manipulation can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-11-23
Last Modified
2026-04-29
Generated
2026-05-07
AI Q&A
2025-11-23
EPSS Evaluated
2026-05-05
NVD
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
ashraf-kabir travel-agency to 2025-07-05 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-434 The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability is a weakness in the ashraf-kabir travel-agency software, specifically in an unknown function within the /customer_register.php file. It allows an attacker to remotely perform unrestricted file uploads by manipulating the system, potentially enabling malicious files to be uploaded to the server.


How can this vulnerability impact me? :

The vulnerability can impact you by allowing attackers to upload arbitrary files to your server without restriction. This could lead to unauthorized access, data compromise, server takeover, or further exploitation of your system.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart