CVE-2025-11470

A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System up to 1.0. The impacted element is an unknown function of the file /manage_website.php. The manipulation of the argument website_image/back_login_image leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

• CWE-284
• CWE-434

• https://github.com/TThuyyy/cve1/issues/13Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.327588Permissions Required, VDB Entry
• https://vuldb.com/?id.327588Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.665462Third Party Advisory, VDB Entry
• https://www.sourcecodester.com/Product

Published

Oct 8, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11465Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote C…7.8
• CVE-2025-11466Allegra DatabaseBackupBL Directory Traversal Information Dis…4.9
• CVE-2025-11467The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, N…5.8
• CVE-2025-11468When folding a long comment in an email header containing ex…5.7
• CVE-2025-11469A weakness has been identified in SourceCodester Hotel and L…9.8
• CVE-2025-1147A vulnerability has been found in GNU Binutils 2.43 and clas…5.3
• CVE-2025-11471A vulnerability was detected in SourceCodester Hotel and Lod…9.8
• CVE-2025-11472A flaw has been found in SourceCodester Hotel and Lodge Mana…9.8
• CVE-2025-11473A vulnerability has been found in SourceCodester Hotel and L…9.8
• CVE-2025-11474A vulnerability was found in SourceCodester Hotel and Lodge …9.8
• CVE-2025-11475A vulnerability was determined in projectworlds Advanced Lib…9.8
• CVE-2025-11476A vulnerability was identified in SourceCodester Simple E-Co…9.8