CVE-2025-14219 MEDIUM

CVE-2025-14219: Campcodes Retro Basketball Shoes Online Store admin_running.php unrestricted upload

Vendor Campcodes

Product Retro Basketball Shoes Online Store

Weakness CWE-434 · Unrestricted file upload

Published December 8, 2025

Last update February 24, 2026

View on NVD All CVEs

CVSS base score

5.1/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/admin_running.php. Executing a manipulation of the argument product_image can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

Key dates

02Disclosure timeline

December 8, 2025 CVE published

February 24, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-14219 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/434.html