PT-2025-51141 · Code Projects · Computer Laboratory System Version 1.0

Yohane-Mashiro · Publicado 2025-12-14 · Atualizado 2025-12-14 · CVE-2025-14642

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Computer Laboratory System version 1.0

Description A flaw exists in code-projects Computer Laboratory System 1.0 that allows for unrestricted file uploads through manipulation of the image argument in the technical staff pic.php file. This issue can be exploited remotely. The exploit details have been publicly disclosed.

Recommendations Apply restrictions to file uploads in the technical staff pic.php file. Sanitize the image argument to prevent unrestricted uploads. Disable or restrict access to the technical staff pic.php file as a temporary measure.

Exploit

Correção

Improper Access Control

Unrestricted File Upload

Enumeração de Fraquezas

CWE-284

CWE-434

Identificadores relacionados

CVE-2025-14642

Produtos afetados

Computer Laboratory System Version 1.0

Referências · 10

• 🔥 https://github.com/Yohane-Mashiro/cve/blob/main/upload%204.md · Exploit
• https://vuldb.com/?ctiid.336375 · Nota
• https://t.me/CVEtracker/39750 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2000246128097325116 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-14642 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-14642 · Nota de Segurança
• https://code-projects.org · Nota
• https://vuldb.com/?submit.707866 · Nota
• https://vuldb.com/?id.336375 · Nota
• https://t.me/cveNotify/145686 · Publicação no Telegram