PT-2025-47857 · Sourcecodester · Sourcecodester Petshop Management System

Fany · Published 2025-11-23 · Updated 2025-12-02 · CVE-2025-13564

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Pre-School Management System version 1.0

Description A security flaw exists in SourceCodester Pre-School Management System 1.0 that can lead to a denial of service. The issue is located in the removefile function within the app/controllers/FilehelperController.php file. Manipulation of the filepath argument can trigger this condition. The attack can be carried out remotely, and an exploit has been publicly released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2025-13564

Affected Products

Sourcecodester Petshop Management System

References · 12

• 🔥 https://github.com/0xffaaa/cve/blob/main/Pre_School_Management_System_Arbitrary_File_Deletion_Vulnerabilit.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-13564 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13564 · Security Note
• https://vuldb.com/?submit.697083 · Note
• https://t.me/cveNotify/143719 · Telegram Post
• https://twitter.com/CVEnew/status/1992666299013435516 · Twitter Post
• https://sourcecodester.com · Note
• https://t.me/CVEtracker/38029 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1992679807574835305 · Twitter Post
• https://vuldb.com/?ctiid.333328 · Note
• https://twitter.com/dailycve/status/1995759004581019980 · Twitter Post
• https://vuldb.com/?id.333328 · Note