CVE-2025-0213

A vulnerability was found in Campcodes Project Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /forms/update_forms.php?action=change_pic2&id=4. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-284
• CWE-434
• CWE-434

• https://github.com/shaturo1337/POCs/blob/main/Remote%20Code%20Execution%20via%20Arbitrary%20File%20Upload%20in%20Project%20Management%20System.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.290158Permissions Required
• https://vuldb.com/?id.290158Third Party Advisory
• https://vuldb.com/?submit.474200Third Party Advisory
• https://www.campcodes.com/Product

Published

Jan 4, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0207A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-0208A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-0209A reflected cross-site scripting (XSS) vulnerability exists …6.1
• CVE-2025-0210A vulnerability has been found in Campcodes School Faculty S…9.8
• CVE-2025-0211A vulnerability was found in Campcodes School Faculty Schedu…9.8
• CVE-2025-0212A vulnerability was found in Campcodes Student Grading Syste…9.8
• CVE-2025-0214A vulnerability was found in TMD Custom Header Menu 4.0.0.1 …4.1
• CVE-2025-0215The UpdraftPlus: WP Backup & Migration Plugin plugin for Wor…6.1
• CVE-2025-0217BeyondTrust Privileged Remote Access (PRA) versions prior to…7.8
• CVE-2025-0218When batch jobs are executed by pgAgent, a script is created…7.1
• CVE-2025-0219A vulnerability, which was classified as problematic, has be…5.1
• CVE-2025-0220A vulnerability, which was classified as problematic, was fo…5.1