CVE-2025-11658 — HIGH (7.3)

Vulnerability Description

A vulnerability was detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected is an unknown function of the file /assets/changeSllyabus.php. The manipulation of the argument File results in unrestricted upload. The attack may be launched remotely. The exploit is now public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases.

CVSS Score

7.3

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

LOW

Affected Products

Vendor	Product	Versions
Oranbyte	School Management System	1.0

Related Weaknesses (CWE)

CWE-434 CWE-284

References

https://github.com/qqy-123/cve/issues/3ExploitIssue TrackingThird Party Advisory
https://vuldb.com/?ctiid.328075Permissions RequiredVDB Entry
https://vuldb.com/?id.328075Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.665605Third Party AdvisoryVDB Entry
https://github.com/qqy-123/cve/issues/3ExploitIssue TrackingThird Party Advisory

FAQ

What is CVE-2025-11658?

CVE-2025-11658 is a vulnerability with a CVSS score of 7.3 (HIGH). A vulnerability was detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected is an unknown function of the file /assets/changeSllyabus.php. The...

How severe is CVE-2025-11658?

CVE-2025-11658 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-11658?

Check the references section above for vendor advisories and patch information. Affected products include: Oranbyte School Management System.