CVE-2025-56295

Summary

code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

Additional References

• https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-56295.md

References

• https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-56295.md

• ←Previous
• Next→