CVE-2025-8433

CVE-2025-8433 affects code-projects Document Management System 1.0 in the dell.php unlink function. The issue arises from manipulating the ID argument, enabling path traversal via the which parameter and potentially allowing deletion of arbitrary server files. Exploitation has been publicly discl...

CVE-2025-8433: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in code-projects Document Management System 1.0 and classified as critical. This issue affects the function unlink of the file /dell.php. The manipulation of the argument ID leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to...