CVE-2025-3969

CVE-2025-3969 concerns the Codeprojects News Publishing Site Dashboard 1.0. The vulnerability is in the Edit Category Page’s /edit-category.php where manipulating the category_image argument leads to unrestricted file uploads. This could enable remote attackers to upload arbitrary files, with pot...

CVE-2025-3968

CVE-2025-3968 affects codeprojects News Publishing Site Dashboard 1.0. The vulnerability is in the file /api.php, where manipulation of the parameter cat_id enables SQL injection . Exploitation can be performed remotely and, according to multiple sources, the exploit has been disclosed publicly. ...