PT-2025-43952 · Code Projects · Client Details System

Liujiying · CVE-2025-12280 · Published 2025-10-27 · Updated 2025-11-03

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions code-projects Client Details System version 1.0

Description A security issue exists in code-projects Client Details System 1.0 related to the processing of the /update-clients.php file. Manipulation of this file can lead to cross site scripting, allowing for remote attacks. The exploit for this issue has been publicly released.

Recommendations Apply updates to address the processing of the /update-clients.php file.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-12280

Affected Products

Client Details System

References · 9

• 🔥 https://github.com/hellonewbie/tutorial/issues/8 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-12280 · Security Note
• https://osv.dev/vulnerability/CVE-2025-12280 · Vendor Advisory
• https://t.me/cveNotify/141385 · Telegram Post
• https://t.me/CVEtracker/35843 · Telegram Post
• https://vuldb.com/?id.329950 · Note
• https://vuldb.com/?submit.674201 · Note
• https://vuldb.com/?ctiid.329950 · Note
• https://code-projects.org · Note