CVE-2025-9841

2.1 lowEPSS 0.3%

Low (2.1) in fabian mobile shop management system. EPSS 0.3% chance of exploitation in the next 30 days.

A security vulnerability has been detected in code-projects Mobile Shop Management System 1.0. This affects an unknown function of the file AddNewProduct.php. The manipulation of the argument ProductImage leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWEs: CWE-284, CWE-434
Published: 2025-09-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fabian:mobile_shop_management_system

References

https://code-projects.org/
https://github.com/chen2496088236/CVE/issues/2
https://vuldb.com/?ctiid.322188
https://vuldb.com/?id.322188
https://vuldb.com/?submit.641779

Check your stack JSON