PT-2025-20581 · Sourcecodester · Sourcecodester Client Database Management System
Published
2025-05-09
·
Updated
2025-12-27
·
CVE-2025-46191
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SourceCodester Client Database Management System version 1.0
Description
The application lacks proper file extension checks, MIME type validation, and authentication when handling file uploads through the
user payment update.php script. Specifically, unauthenticated users can upload arbitrary files via the uploaded file cancelled field. Successful exploitation allows attackers to upload executable PHP files to the /files/ directory, which is web-accessible. This enables remote code execution by accessing the uploaded script, granting attackers full control of the system.Recommendations
SourceCodester Client Database Management System version 1.0: Implement robust file validation to verify file extensions and MIME types before accepting uploads. Enforce authentication for all file upload operations. Restrict access to the
/files/ directory to prevent direct execution of uploaded files.Exploit
Fix
RCE
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sourcecodester Client Database Management System