What’s Vulnerable › Vulnerabilities

CVE-2025-14219: Campcodes Retro Basketball Shoes Online Store admin_running.php unrestricted upload

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-12-08 · updated 2026-10-07
• Weakness: CWE-284

Description

A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/admin_running.php. Executing a manipulation of the argument product_image can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

Affected products

• Campcodes Retro Basketball Shoes Online Store: 1.0

References

• https://github.com/yyue02/cve/issues/1
• https://vuldb.com/?ctiid.334661
• https://vuldb.com/?id.334661
• https://vuldb.com/?submit.701209
• https://www.campcodes.com/
• https://github.com/yyue02/cve/issues/1

Get alerted when CVE-2025-14219 or the next vulnerability affects your stack