CVE-2025-1598

🗓️ 23 Feb 2025 23:31:04Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 71 Views🌐 WEB

Critical vulnerability in Best Church Management Software allows remote unrestricted file upload.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-1598	24 Feb 202500:21	–	circl
CNNVD	SourceCodester Best Church Management Software 代码问题漏洞	24 Feb 202500:00	–	cnnvd
Cvelist	CVE-2025-1598 SourceCodester Best Church Management Software asset_crud.php unrestricted upload	23 Feb 202523:31	–	cvelist
EUVD	EUVD-2025-4393	3 Oct 202520:07	–	euvd
NVD	CVE-2025-1598	24 Feb 202500:15	–	nvd
Positive Technologies	PT-2025-7660 · Sourcecodester · Sourcecodester Best Church Management	23 Feb 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-1598	26 Feb 202500:24	–	redhatcve
Vulnrichment	CVE-2025-1598 SourceCodester Best Church Management Software asset_crud.php unrestricted upload	23 Feb 202523:31	–	vulnrichment

NVD

Vulners

Node

mayurik best_church_management_softwareMatch1.0

[
  {
    "vendor": "SourceCodester",
    "product": "Best Church Management Software",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/best-church-management-software-Arbitrary-File-Upload.md
sourcecodester	www.sourcecodester.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
photo1	request body	/admin/app/asset_crud.php	Unrestricted upload vulnerability via the photo1 parameter in the asset_crud.php endpoint.	CWE-284, CWE-434

28 Feb 2025 19:23Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.3 - 9.8

CVSS 45.3

CVSS 26.5

CVSS 36.3

EPSS0.00082

SSVC