Path Traversal Vulnerability in SourceCodester Best Church Management Software

CVE-2025-1599

Summary

A path traversal vulnerability has been identified in the SourceCodester Best Church Management Software version 1.0, specifically affecting the file /admin/app/profile_crud.php. The issue arises from improper handling of the 'old_cat_img' argument, allowing an attacker to manipulate the path and potentially gain unauthorized access to files outside the intended directory structure. This vulnerability can be exploited remotely, making it a significant security concern. Despite efforts to inform the vendor about this vulnerability, no response was received.

References