File Upload Vulnerability in SourceCodester Company Website CMS
CVE-2025-29708
9.8CRITICAL
What is CVE-2025-29708?
The SourceCodester Company Website CMS 1.0 features a critical file upload vulnerability within the 'Create Services' functionality located in the /dashboard/Services directory. This flaw allows unauthorized users to upload malicious files, potentially leading to remote code execution. It is essential for users and administrators to apply appropriate security measures to safeguard their systems against exploitation.