PT-2025-46717 · Unknown · Dinukanavaratna Dee Store

Ixpqxi · Published 2025-11-12 · Updated 2025-11-12 · CVE-2025-13063

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DinukaNavaratna Dee Store version 1.0

Description A flaw exists in DinukaNavaratna Dee Store version 1.0 that can lead to missing authorization due to manipulation. The issue is present in an unknown function and can be exploited remotely. The exploit has been published. Multiple endpoints are affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Authorization

Missing Authorization

Weakness Enumeration

CWE-863

CWE-862

Related Identifiers

CVE-2025-13063

Affected Products

Dinukanavaratna Dee Store

References · 6

• 🔥 https://github.com/DinukaNavaratna/Dee_Store-Simple_Online_Shopping_Website/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-13063 · Security Note
• https://vuldb.com/?id.332189 · Note
• https://twitter.com/CVEnew/status/1988721692525334602 · Twitter Post
• https://vuldb.com/?submit.682708 · Note
• https://vuldb.com/?ctiid.332189 · Note