File Upload Vulnerability in Code-Projects Computer Laboratory System 1.0
CVE-2025-56295
7.3HIGH
What is CVE-2025-56295?
The Code-Projects Computer Laboratory System 1.0 is susceptible to a file upload vulnerability that allows users to upload malicious PHP files under the guise of personal avatar updates. This weakness can be exploited to establish web shell connections, potentially granting attackers unauthorized access to server permissions and sensitive data.
References
CVSS V3.1
Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved