CVE-2025-14642

Affects: code-projects Computer Laboratory System 1.0. The vulnerability is in the file technical_staff_pic.php, where manipulation of the image parameter can lead to unrestricted file upload. This is described across CNVD/CNVD-derived entries and other references as a remote vulnerability with a...

CVE-2025-56295

The code-projects Computer Laboratory System 1.0 contains a file upload vulnerability caused by the software's failure to restrict file types during the avatar modification process. Staff members can exploit this by uploading PHP backdoor files to establish a web shell connection, potentially lea...

CVE-2025-14641

The connected CNVD, RH Red Hat entry, CNNVD, EUVD, NVD, CVE/CVEList, and CVE Records describe a vulnerability in code-projects Computer Laboratory System 1.0 affecting /admin/admin_pic.php where mishandling of the image parameter enables unrestricted file upload. This is a remote-exploitable flaw...

CVE-2025-60307

The code-projects Computer Laboratory System 1.0 is vulnerable to a SQL injection flaw due to a lack of validation for externally entered SQL statements in the Password field of the login page. An attacker can exploit this by entering a universal password to bypass login validation . Remediation ...