CVE-2025-15199
⚪ Do wiadomości
Nieograniczony upload plików w College Notes Uploading System umożliwia zdalne wykorzystanie podatności.
CVSS
6.3
EPSS
0.3%
Exploit
none
Vendor
code-projects
Opis źródłowy (NVD)
A security vulnerability has been detected in code-projects College Notes Uploading System 1.0. Impacted is an unknown function of the file /dashboard/userprofile.php. The manipulation of the argument image leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
brak
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 6.3 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 0.3% |
| Opublikowano (NVD) | 2025-12-29 19:15:56 UTC |
| Ostatnia modyfikacja (NVD) | 2026-10-07 12:10:00 UTC |
Referencje
- https://code-projects.org/ ([email protected]) [Product]
- https://github.com/jjjjj-zr/jjjjjzr18/issues/1 ([email protected]) [Broken Link]
- https://vuldb.com/?ctiid.338586 ([email protected]) [Permissions Required, VDB Entry]
- https://vuldb.com/?id.338586 ([email protected]) [Third Party Advisory, VDB Entry]
- https://vuldb.com/?submit.724794 ([email protected]) [Third Party Advisory, VDB Entry]