File Upload Vulnerability in Mobile Shop Management System by Code-Projects
CVE-2025-69565

9.8CRITICAL

Key Information:

Vendor: Code-Projects
Status: Mobile Shop Management System
Vendor: CVE Published:; 27 January 2026

🔔 Create Code-Projects Vulnerability Alert

What is CVE-2025-69565?

The Mobile Shop Management System by Code-Projects version 1.0 contains a critical file upload vulnerability in the ExAddProduct.php script. This flaw may allow an attacker to upload malicious files, potentially compromising the server and leading to unauthorized access or data exposure. It is essential for users of this system to take immediate action to mitigate any risks associated with this vulnerability by applying necessary updates and employing additional security measures.

References

https://gitee.com/Z_180yc/zyy/issues/IDCFAQ

https://gist.github.com/lih28984-commits/81d523afde3b122c...

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 27, 2026
Vulnerability Reserved
Jan 9, 2026

CVE-2025-69565 Data

JSON