PT-2025-51141 · Code Projects · Computer Laboratory System Version 1.0

Yohane-Mashiro · Published 2025-12-14 · Updated 2025-12-14 · CVE-2025-14642

Positive Technologies · (AI Summary)

CVSS v3.1

7.2

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Computer Laboratory System version 1.0

Description A flaw exists in code-projects Computer Laboratory System 1.0 that allows for unrestricted file uploads through manipulation of the

image

argument in the

technical staff pic.php

file. This issue can be exploited remotely. The exploit details have been publicly disclosed.

Recommendations Apply restrictions to file uploads in the

technical staff pic.php

file. Sanitize the

image

argument to prevent unrestricted uploads. Disable or restrict access to the

technical staff pic.php

file as a temporary measure.

Exploit

Fix

Unrestricted File Upload

Improper Access Control

Weakness Enumeration

CWE-434

CWE-284

Related Identifiers

CVE-2025-14642

Affected Products

Computer Laboratory System Version 1.0

References · 9

• 🔥 https://github.com/Yohane-Mashiro/cve/blob/main/upload%204.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-14642 · Security Note
• https://t.me/cveNotify/145686 · Telegram Post
• https://vuldb.com/?id.336375 · Note
• https://t.me/CVEtracker/39750 · Telegram Post
• https://code-projects.org · Note
• https://vuldb.com/?submit.707866 · Note
• https://vuldb.com/?ctiid.336375 · Note
• https://twitter.com/CVEnew/status/2000246128097325116 · Twitter Post