CVE-2025-0206

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Jan 4, 2025
Updated: Jan 22, 2025
CWE ID 284
CWE ID 266

Summary

CVE-2025-0206 is a critical vulnerability affecting the code-projects Online Shoe Store 1.0. This issue lies within an unidentified functionality of the /admin/index.php file. The manipulation results in inadequate access controls, enabling remote attackers to gain unauthorized access. The exploit for this vulnerability has been made public, increasing the risk for potential exploitation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Online Shoe Store

Affected Vendors

  • Code Projects

Advisories, Assessments, and Mitigations