Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2025/10/13 2:02 a.m.•47 views

CVE-2025-11656 ProjectsAndPrograms School Management System editNotes.php unrestricted upload

A weakness has been identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown function of the file /assets/editNotes.php. Executing manipulation of the argument File can lead to unrestricted upload. The attack can be launche...

7.5CVSS0.00594EPSS
SaveExploits1References4
CVE
CVE
•added 2025/10/13 2:02 a.m.•41 views

CVE-2025-11656

CVE-2025-11656 concerns ProjectsAndPrograms School Management System. Multiple sources confirm a weakness in the PHP file /assets/editNotes.php, where unsanitized manipulation of the File argument enables unrestricted (arbitrary) file upload. The vulnerability is exploitable remotely and has publ...

9.8CVSS6.8AI score0.00594EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/13 12:00 a.m.•8 views

CVE-2025-11656: Unrestricted Upload of File with Dangerous Type

A weakness has been identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown function of the file /assets/editNotes.php. Executing manipulation of the argument File can lead to unrestricted upload. The attack can be launche...

9.8CVSS6.9AI score0.00594EPSS
SaveExploits1References7
Rows per page
Query Builder