Threats tagged 'ghsa-h684-p7cm-3g45'

A security vulnerability (CVE-2025-13275) exists in Iqbolshoh php-business-website up to commit 10677743a8dfc281f85291a27cf63a0bce043c24. The flaw is located in the /admin/about.php file and allows unrestricted file upload through remote attack. The vulnerability has been publicly disclosed and exploit code may be available. The product uses a rolling release model, so specific affected or fixed versions are not provided.