A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /customer_register.php. The manipulation of the argument name leads to unrestricted upload.

This vulnerability is handled as CVE-2025-2035. The attack may be launched remotely. Furthermore, there is an exploit available.