CVE-2025-46191

Arbitrary File Upload in userpaymentupdate.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploadedfilecancelled field. Due to the absence of proper file extension checks, MIME type validation, and authentication, attacker...

CVE-2025-46191

creationtimestamp| type| source ---|---|--- 2025-05-09 17:25:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15782 2025-05-09 18:32:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lor2rtmsuu2r 2025-05-09 20:23:18+00:00| seen|...

CVE-2025-46191

Arbitrary File Upload in userpaymentupdate.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploadedfilecancelled field. Due to the absence of proper file extension checks, MIME type validation, and authentication, attacker...

CVE-2025-46191

The SourceCodester Client Database Management System version 1.0 is vulnerable to Arbitrary File Upload in the user_payment_update.php script. The root cause is a lack of authentication, file extension checks, and MIME type validation when processing the uploaded_file_cancelled field. This allows...