CVE-2025-5108: Medium Unrestricted Upload in ShopXO 6.5.0
ShopXO 6.5.0 has a medium severity unrestricted upload in the payment ZIP handler. No fix is confirmed, so limit admin access and check uploads.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
ShopXO 6.5.0 has a medium severity unrestricted upload in the payment ZIP handler. No fix is confirmed, so limit admin access and check uploads.
Fujian Kelixun 1.0 has a medium severity SQL injection in xml_cdr_details.php. The vendor did not respond and no fix is confirmed, so limit access.
Campcodes Cybercafe Management System 1.0 has a high severity SQL injection in adminprofile.php. No fix is confirmed, so limit access and review queries.
Online Shopping Portal 1.0 (PHPGurukul and Campcodes) has a high severity SQL injection in updateorder.php. No fix is confirmed, so limit access.
Online Shopping Portal 1.0 (PHPGurukul and Campcodes) has a high severity SQL injection in subcategory.php. No fix is confirmed, so limit access.
Campcodes Online Shopping Portal 1.0 has a high severity SQL injection in edit-subcategory.php. No fix is confirmed, so restrict access and review queries.
FreeFloat FTP Server 1.0 has a high severity buffer overflow in the SEND command. No fix is confirmed, so retire the server or restrict access.
FreeFloat FTP Server 1.0 has a high severity buffer overflow in the DEBUG command. No fix is confirmed, so retire the server or restrict access.
FreeFloat FTP Server 1.0 has a high severity buffer overflow in the PROMPT command. No fix is confirmed, so retire the server or restrict access.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.