CVE-2025-1599

A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/app/profile_crud.php. The manipulation of the argument old_cat_img leads to path traversal: '../filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-23
• CWE-24
• CWE-22

• https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/best-church-management-software-Delete-any-file.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.296594Permissions Required, VDB Entry
• https://vuldb.com/?id.296594Permissions Required, VDB Entry
• https://vuldb.com/?submit.498188Third Party Advisory, VDB Entry
• https://www.sourcecodester.com/Product

Published

Feb 24, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-1593A vulnerability classified as critical has been found in Sou…9.8
• CVE-2025-1594A vulnerability, which was classified as critical, was found…8.8
• CVE-2025-1595A vulnerability has been found in Anhui Xufan Information Te…6.9
• CVE-2025-1596A vulnerability was found in SourceCodester Best Church Mana…9.8
• CVE-2025-1597A vulnerability was found in SourceCodester Best Church Mana…6.1
• CVE-2025-1598A vulnerability was found in SourceCodester Best Church Mana…9.8
• CVE-2025-1606A vulnerability classified as problematic was found in Sourc…7.5
• CVE-2025-1607A vulnerability, which was classified as problematic, has be…5.3
• CVE-2025-1608A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-1609A vulnerability has been found in LB-LINK AC1900 Router 1.0.…9.8
• CVE-2025-1610A vulnerability was found in LB-LINK AC1900 Router 1.0.2 and…9.8
• CVE-2025-1611A vulnerability was found in ShopXO up to 6.4.0. It has been…5.1