PT-2025-51141 · Code Projects · Computer Laboratory System Version 1.0

Yohane-Mashiro · Published 2025-12-14 · Updated 2025-12-14 · CVE-2025-14642

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Computer Laboratory System version 1.0

Description A flaw exists in code-projects Computer Laboratory System 1.0 that allows for unrestricted file uploads through manipulation of the image argument in the technical staff pic.php file. This issue can be exploited remotely. The exploit details have been publicly disclosed.

Recommendations Apply restrictions to file uploads in the technical staff pic.php file. Sanitize the image argument to prevent unrestricted uploads. Disable or restrict access to the technical staff pic.php file as a temporary measure.

Exploit

Fix

Improper Access Control

Unrestricted File Upload

Weakness Enumeration

CWE-284

CWE-434

Related Identifiers

CVE-2025-14642

Affected Products

Computer Laboratory System Version 1.0

References · 10

• 🔥 https://github.com/Yohane-Mashiro/cve/blob/main/upload%204.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-14642 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14642 · Security Note
• https://vuldb.com/?ctiid.336375 · Note
• https://t.me/CVEtracker/39750 · Telegram Post
• https://twitter.com/CVEnew/status/2000246128097325116 · Twitter Post
• https://code-projects.org · Note
• https://vuldb.com/?submit.707866 · Note
• https://vuldb.com/?id.336375 · Note
• https://t.me/cveNotify/145686 · Telegram Post