CVE-2025-8504

CVE-2025-8504 affects code-projects Kitchen Treasure 1.0. The vulnerability is in an unknown part of /userregistration.php where manipulating the photo parameter leads to unrestricted file upload, and exploitation can be performed remotely. Multiple sources (NVD/NVD-affiliate feeds, Red Hat, CVE ...

CVE-2025-8437

CVE-2025-8437 affects code-projects Kitchen Treasure 1.0, with the vulnerability located in an unknown part of /userregistration.php. The issue is an SQL injection via the email parameter that can be triggered remotely, and the exploit has been publicly disclosed. Connected documents corroborate ...