CVE-2025-15152

A vulnerability was identified in h-moses moga-mall up to 392d631a5ef15962a9bddeeb9f1269b9085473fa. This vulnerability affects the function addProduct of the file src/main/java/com/ms/product/controller/PmsProductController.java. Such manipulation of the argument objectName leads to unrestricted upload. The attack may be performed from remote. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed.

• CWE-284
• CWE-434

• https://github.com/zyhzheng500-maker/cve/blob/main/moga-mall%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md
• https://vuldb.com/?ctiid.338529
• https://vuldb.com/?id.338529
• https://vuldb.com/?submit.721988

Published

Dec 28, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15147The WCFM Membership – WooCommerce Memberships for Multivendo…4.3
• CVE-2025-15148A flaw has been found in CmsEasy up to 7.7.7. Affected is th…7.2
• CVE-2025-15149A vulnerability has been found in rawchen ecms up to b59d7fe…2.4
• CVE-2025-1515The WP Real Estate Manager plugin for WordPress is vulnerabl…9.8
• CVE-2025-15150A vulnerability was found in PX4 PX4-Autopilot up to 1.16.0.…7.8
• CVE-2025-15151A vulnerability was determined in TaleLin Lin-CMS up to 0.6.…3.7
• CVE-2025-15153A weakness has been identified in PbootCMS up to 3.2.12. Imp…5.9
• CVE-2025-15154A security vulnerability has been detected in PbootCMS up to…5.5
• CVE-2025-15155A vulnerability was detected in floooh sokol up to 16cbcc864…7.8
• CVE-2025-15156A flaw has been found in omec-project UPF up to 2.1.3-dev. T…4.3
• CVE-2025-15157The Starfish Review Generation & Marketing for WordPress plu…8.8
• CVE-2025-15158The WP Enable WebP plugin for WordPress is vulnerable to arb…8.8