CVE-2025-13275CWE-284CWE-434broken-access-controlunrestricted-file-upload

CVE-2025-13275

Medium · published November 17, 2025

CVSS v3.1
4.7
EPSS
0%
Percentile
22.2
In the wild
Unconfirmed
What it is

A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of the file /admin/about.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.2th percentile
Weaknesses
CWE-284 · Improper Access Control; CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-11-17T16:15Z
References (4)
EPSS history
Timeline
  • 17 NOV 10:32Z
    Iqbolshoh php-business-website about.php unrestricted upload
    cvelistv5