CVE-2025-12223

HighCVSS 8.8/10Last modified Oct 8, 2026

Description

A vulnerability was detected in Bdtask Flight Booking Software up to 3.1. This affects an unknown part of the file /b2c/package-information of the component Package Information Module. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284 CWE-434

Affected software

No affected versions have been published.

Timeline

Published: Oct 27, 2025
Last modified: Oct 8, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-122243.5A flaw has been found in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This vulnerability affects unknown c CVE-2025-122258.8A vulnerability has been found in Tenda AC6 15.03.06.50. This issue affects some unknown processing of the file /goform/WifiGuestSet of the CVE-2025-122269.8A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function save_house of the file /admin_CVE-2025-122275.4A vulnerability was determined in projectworlds Gate Pass Management System 1.0. The affected element is an unknown function of the file /ad CVE-2025-122284.8A vulnerability was identified in projectworlds Expense Management System 1.0. The impacted element is an unknown function of the file /publ CVE-2025-122294.8A security flaw has been discovered in projectworlds Expense Management System 1.0. This affects an unknown function of the file /public/adm CVE-2025-12236.1An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Clie CVE-2025-122304.8A weakness has been identified in projectworlds Expense Management System 1.0. This impacts an unknown function of the file /public/admin/cu CVE-2025-122314.8A security vulnerability has been detected in projectworlds Expense Management System 1.0. Affected is an unknown function of the file /publ CVE-2025-122329.8A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/CVE-2025-122338.8A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Exe CVE-2025-122348.8A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The man