Metrics
Affected Vendors & Products
Tue, 08 Jul 2025 20:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Carmelo
Carmelo staff Audit System |
|
CPEs | cpe:2.3:a:carmelo:staff_audit_system:1.0:*:*:*:*:*:*:* | |
Vendors & Products |
Carmelo
Carmelo staff Audit System |
Tue, 08 Jul 2025 16:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Tue, 08 Jul 2025 14:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A vulnerability, which was classified as critical, was found in code-projects Staff Audit System 1.0. Affected is an unknown function of the file /test.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. | |
Title | code-projects Staff Audit System test.php unrestricted upload | |
Weaknesses | CWE-284 CWE-434 |
|
References |
| |
Metrics |
cvssV2_0
|

Status: PUBLISHED
Assigner: VulDB
Published: 2025-07-08T14:02:05.702Z
Updated: 2025-07-08T16:10:46.389Z
Reserved: 2025-07-07T08:07:54.832Z
Link: CVE-2025-7181

Updated: 2025-07-08T14:24:51.364Z

Status : Analyzed
Published: 2025-07-08T14:15:32.177
Modified: 2025-07-08T19:40:53.907
Link: CVE-2025-7181

No data.