Vulnerability Description
A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /oews/admin/. The manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. Multiple sub-directories are affected.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oretnom23 | Online Eyewear Shop | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/happytraveller-alone/cve/blob/main/Directory%20Traversal%20VuExploitThird Party Advisory
- https://vuldb.com/?ctiid.300666Permissions RequiredVDB Entry
- https://vuldb.com/?id.300666Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.519873Third Party AdvisoryVDB Entry
- https://www.sourcecodester.com/Product
FAQ
What is CVE-2025-2651?
CVE-2025-2651 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /oews/admin/. The manipulation leads to exposure ...
How severe is CVE-2025-2651?
CVE-2025-2651 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-2651?
Check the references section above for vendor advisories and patch information. Affected products include: Oretnom23 Online Eyewear Shop.