Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2025-29017

🗓️ 10 Apr 2025 00:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 74 Views🌐 WEB

Remote Code Execution vulnerability in Code Astro Internet Banking System due to file upload issue.

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
circl
Circl		CVE-2025-29017
10 Apr 202515:32
–circl
cnnvd
CNNVD		CodeAstro Internet Banking System 安全漏洞
10 Apr 202500:00
–cnnvd
cvelist
Cvelist		CVE-2025-29017
10 Apr 202500:00
–cvelist
githubexploit
GithubExploit		Exploit for Unrestricted Upload of File with Dangerous Type in Codeastro Internet_Banking_System
28 Mar 202509:00
–githubexploit
euvd
EUVD		EUVD-2025-10697
3 Oct 202520:07
–euvd
kitploit
Kitploit		CVE-2025-29017
1 Sep 202609:26
–kitploit
nvd
NVD		CVE-2025-29017
10 Apr 202514:15
–nvd
osv
OSV		CVE-2025-29017
10 Apr 202514:15
–osv
ptsecurity
Positive Technologies		PT-2025-15988 · Unknown · Codeastro Internet Banking System
10 Apr 202500:00
–ptsecurity
redhatcve
RedhatCVE		CVE-2025-29017
12 Apr 202500:05
–redhatcve
Rows per page
NVD
Node
codeastrointernet_banking_systemMatch2.0.0
ParameterPositionPathDescriptionCWE
profile_picrequest bodypages_view_client.phpUpload endpoint vulnerable to improper validation of profile_pic leading to RCE via crafted PHP payload.CWE-434
cmdpathadmin/dist/img/image.jpeg.phpUploaded file path that can be executed as PHP, enabling remote command execution via the query parameter.CWE-434

ksg93rd

#exploit . CVE-2025-20281: Cisco ISE API Unauthenticated RCE - https://t.co/mAOCPxXCcD . CVE-2025-29017: Internet Banking System 2.0 RCE via Profile Picture Upload - https://t.co/Aj3gRdWsxL . CVE-2025-22230, CVE-2025-22247: The Guest Who Could - Exploiting LPE in VMWare Tools - https://t.co/qgdsXW0jPH . CVE-2025-6554: A Brief Analysis of Chrome's 0day in the Wild - https://t.co/b6C1zVSQDd . CVE-2025-7783: form-data boundary randomness vulnerability - https://t.co/r5m50t6ktw . CVE-2025-31161: CrushFTP Authentication Bypass - https://t.co/p41esa63mM . CVE-2025-53770 SharePoint Vulnerability Scanner: - Machine key extraction patterns - Secondary payload indicators - ExcelDataSet/Scorecard component processing - ToolPane error patterns/anomalous response characteristics + SIEM/WAF Detection Rules - https://t.co/nLtqneVn1Q // Disclaimer #info Disclaimer . All information and software shared by /ksg93rd is for educational purposes only. Use these at your own discretion, /ksg93rd is not responsible for any damages caused. . Usage of all tools on this channel for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. . /ksg93rd assume no liability and are not responsible for any misuse or damage caused by this channel.

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 09:05Current
7.2High risk
Vulners AI Score7.2
CVSS 3.18.8
EPSS0.00824
SSVC
CWE-434
remote code executioncode astrointernet banking systemfile upload validationvulnerability
74