CVE-2025-15404

A security vulnerability has been detected in campcodes School File Management System 1.0. The affected element is an unknown function of the file /save_file.php. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

• CWE-284
• CWE-434
• CWE-434

• https://github.com/LaneyYu/cve/issues/7Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.339324Permissions Required, VDB Entry
• https://vuldb.com/?id.339324Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.728102Third Party Advisory, VDB Entry
• https://www.campcodes.com/Product

Published

Jan 1, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15396The Library Viewer WordPress plugin before 3.2.0 does not sa…7.1
• CVE-2025-15398A security vulnerability has been detected in Uasoft badaso …8.1
• CVE-2025-15399IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2…10
• CVE-2025-1540An issue has been discovered in GitLab CE/EE for Self-Manage…4.2
• CVE-2025-15400The OpenPix for WooCommerce WordPress plugin through 2.13.3 …6.5
• CVE-2025-15403The RegistrationMagic plugin for WordPress is vulnerable to …9.8
• CVE-2025-15405A vulnerability was detected in PHPEMS up to 11.0. The impac…8.8
• CVE-2025-15406A flaw has been found in PHPGurukul Online Course Registrati…8.8
• CVE-2025-15407A vulnerability has been found in code-projects Online Guita…9.8
• CVE-2025-15408A vulnerability was found in code-projects Online Guitar Sto…9.8
• CVE-2025-15409A vulnerability was determined in code-projects Online Guita…9.8
• CVE-2025-15410A vulnerability was identified in code-projects Online Guita…9.8