CVE-2025-11656

CVE-2025-11656 concerns ProjectsAndPrograms School Management System. Multiple sources confirm a weakness in the PHP file /assets/editNotes.php, where unsanitized manipulation of the File argument enables unrestricted (arbitrary) file upload. The vulnerability is exploitable remotely and has publ...

CVE-2025-11656 ProjectsAndPrograms School Management System editNotes.php unrestricted upload

A weakness has been identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown function of the file /assets/editNotes.php. Executing manipulation of the argument File can lead to unrestricted upload. The attack can be launche...