CVE-2025-56295

The code-projects Computer Laboratory System 1.0 contains a file upload vulnerability caused by the software's failure to restrict file types during the avatar modification process. Staff members can exploit this by uploading PHP backdoor files to establish a web shell connection, potentially lea...