Description
phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation.
Critical · 9.1
CVE-2025-57148
EUVD-2025-26521GHSA-r8mj-j9rp-jf4j
phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension val…
Published Sep 3, 2025 · Updated Apr 6, 2026 · Assigned by mitre