Description
code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions.
Metrics
CVSS 3.1 7.3/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-56295.mdExploit, Third Party Advisory
- https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-56295.mdExploit, Third Party Advisory
Timeline
- Published
- Sep 16, 2025
- Last modified
- Nov 7, 2026
- NVD status
- Modified