PT-2025-47870 · Code Projects · Eblog Site

Yohane-Mashiro · Published 2025-11-24 · Updated 2025-12-02 · CVE-2025-13576

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Blog Site version 1.0

Description A security issue exists in code-projects Blog Site 1.0 where manipulation of an unknown function within the /admin.php file can lead to improper authorization. This allows for remote initiation of the attack. The exploit is publicly available. Multiple API endpoints are affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2025-13576

Affected Products

Eblog Site

References · 12

• 🔥 https://github.com/Yohane-Mashiro/cve/blob/main/Unauthorized.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-13576 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13576 · Security Note
• https://vuldb.com/?submit.698772 · Note
• https://t.me/CVEtracker/38043 · Telegram Post
• https://vuldb.com/?id.333340 · Note
• https://twitter.com/CVEnew/status/1992790776690925868 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1992769462735409443 · Twitter Post
• https://twitter.com/dailycve/status/1995762113499775023 · Twitter Post
• https://t.me/cveNotify/143729 · Telegram Post
• https://vuldb.com/?ctiid.333340 · Note
• https://code-projects.org · Note