CVE-2025-13275

A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of the file /admin/about.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

• CWE-284
• CWE-434

• https://github.com/mhszed/Report/blob/main/php-business-website%20upload.docx
• https://vuldb.com/?ctiid.332610
• https://vuldb.com/?id.332610
• https://vuldb.com/?submit.690049

Published

Nov 17, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-1327The Homey theme for WordPress is vulnerable to Insecure Dire…4.3
• CVE-2025-13270A vulnerability was found in Campcodes School Fees Payment M…8.8
• CVE-2025-13271A vulnerability was determined in Campcodes School Fees Paym…9.8
• CVE-2025-13272A vulnerability was identified in Campcodes School Fees Paym…9.8
• CVE-2025-13273A security flaw has been discovered in Campcodes School Fees…8.8
• CVE-2025-13274A weakness has been identified in Campcodes School Fees Paym…8.8
• CVE-2025-13276A vulnerability was detected in g33kyrash Online-Banking-Sys…7.3
• CVE-2025-13277A flaw has been found in code-projects Nero Social Networkin…9.8
• CVE-2025-13278A vulnerability has been found in projectworlds Advanced Lib…8.8
• CVE-2025-13279A vulnerability was found in code-projects Nero Social Netwo…8.8
• CVE-2025-1328The Typed JS: A typewriter style animation plugin for WordPr…5.4
• CVE-2025-13280A vulnerability was determined in CodeAstro Simple Inventory…9.8