A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin_football.php. Performing a manipulation of the argument product_image results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://github.com/laosijivul/cve/issues/2 Exploit, Issue Tracking, Mitigation, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 2.0 · campcodesNVD modified 2026-10-18 20:10
Affected (CPE criteria) 1
cpe:2.3:a:campcodes:retro_basketball_shoes_online_store:1.0:*:*:*:*:*:*:*
References 5
- https://github.com/laosijivul/cve/issues/2 Exploit, Issue Tracking, Mitigation, Third Party Advisory
- https://vuldb.com/?ctiid.332938 Permissions Required, VDB Entry
- https://vuldb.com/?id.332938 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.693697 Third Party Advisory, VDB Entry
- https://www.campcodes.com/ Product