CVE-2025-56295

High CVSS: 7.3

code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions.

Vendor

Carmelo

Product

Computer Laboratory System

CWE

CWE-434

Yayın Tarihi

2025-09-16 15:15:45

Güncelleme

2025-09-18 16:50:45

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-434 Computer Laboratory System HIGH Carmelo 2025

Referanslar

http://code-projects.com https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-56295.md https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-56295.md

Benzer Kayıtlar

Medium

CVE-2026-5019

A security vulnerability has been detected in code-projects Simple Food Order System 1.0. Affected by this vulnerability…

Medium

CVE-2026-5018

A weakness has been identified in code-projects Simple Food Order System 1.0. Affected is an unknown function of the fil…

Medium

CVE-2026-5017

A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of t…

Medium

CVE-2026-4533

A vulnerability was detected in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown fu…

Medium

CVE-2026-3763

A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. The affected element is an unknown f…

Medium

CVE-2026-3745

A vulnerability was found in code-projects Student Web Portal 1.0. Affected is an unknown function of the file profile.p…