Vulnerability Description
A vulnerability was found in code-projects Content Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/publishnews.php of the component Publish News Page. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Code-Projects | Content Management System | 1.0 |
Related Weaknesses (CWE)
References
- https://code-projects.org/Product
- https://gist.github.com/Lytes/266e5fa6eb4506fe2c7e35166664249aExploitThird Party Advisory
- https://vuldb.com/?ctiid.290859Permissions RequiredVDB Entry
- https://vuldb.com/?id.290859Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.476728Third Party AdvisoryVDB Entry
FAQ
What is CVE-2025-0346?
CVE-2025-0346 is a vulnerability with a CVSS score of 4.7 (MEDIUM). A vulnerability was found in code-projects Content Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/publishnews.php of the component Publish N...
How severe is CVE-2025-0346?
CVE-2025-0346 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-0346?
Check the references section above for vendor advisories and patch information. Affected products include: Code-Projects Content Management System.