Itsourcecode · Itsourcecode E-Commerce Website · CVE-2025-10615
**Name of the Vulnerable Software and Affected Versions**
itsourcecode E-Commerce Website version 1.0
**Description**
A vulnerability exists in itsourcecode E-Commerce Website 1.0, impacting an unknown function within the `/admin/products.php` file. This allows for unrestricted file upload, and the attack can be initiated remotely. The exploit is publicly available.
**Recommendations**
Address the unrestricted upload issue in the `/admin/products.php` file.