6 matches found
CVE-2025-8504
A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has...
CVE-2025-8504
CVE-2025-8504 affects code-projects Kitchen Treasure 1.0. The vulnerability is in an unknown part of /userregistration.php where manipulating the photo parameter leads to unrestricted file upload, and exploitation can be performed remotely. Multiple sources (NVD/NVD-affiliate feeds, Red Hat, CVE ...
CVE-2025-8504 code-projects Kitchen Treasure userregistration.php unrestricted upload
A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has...
Code-Projects Kitchen Treasure 代码问题漏洞
Code-Projects Kitchen Treasure is an open source kitchen software from Code-Projects. A code issue vulnerability exists in Code-Projects Kitchen Treasure version 1.0, which stems from the incorrect manipulation of the parameter photo in the file /userregistration.php resulting in unlimited upload...
CVE-2025-8437
CVE-2025-8437 affects code-projects Kitchen Treasure 1.0, with the vulnerability located in an unknown part of /userregistration.php. The issue is an SQL injection via the email parameter that can be triggered remotely, and the exploit has been publicly disclosed. Connected documents corroborate ...
CVE-2025-8437 code-projects Kitchen Treasure userregistration.php sql injection
A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...