Back to feed
EUVD-2025-18127 · Published Jun 11, 2025
An unrestricted file upload vulnerability exists in the Product Image section of the VirtueMart backend. Authenticated attackers can upload files with arbitrary extensions, including executable or malicious files, potentially leading to remote code execution or other security impacts depending on server configuration.
Weaknesses
CWE-434
CVSS scores
- v3.17.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access Execution Stealth
References
Potentially impacted assets
See if this affects your attack surface
