File Upload Vulnerability in Code-Projects Computer Laboratory System 1.0
CVE-2025-56295

7.3HIGH

Key Information:

Vendor

Code-Projects

Status
Computer Laboratory System
Vendor
CVE Published:
16 September 2025

What is CVE-2025-56295?

The Code-Projects Computer Laboratory System 1.0 is susceptible to a file upload vulnerability that allows users to upload malicious PHP files under the guise of personal avatar updates. This weakness can be exploited to establish web shell connections, potentially granting attackers unauthorized access to server permissions and sensitive data.

References

http://code-projects.com
https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-5629...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-56295 : File Upload Vulnerability in Code-Projects Computer Laboratory System 1.0