CVE-2025-13275 - CVE House
Back to Database
Status published Medium CVE-2025-13275

Iqbolshoh php-business-website about.php unrestricted upload

Vulnerability Description

A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of the file /admin/about.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-13275

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • mahushuai (VulDB User)

Affected Vendor

Affected Software

php-business-website
Vulnerable Versions:
10677743a8dfc281f85291a27cf63a0bce043c24

Timeline

Official Publish: November 17th, 2025
Last Modified: November 17th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Weaknesses (CWE)