CVE-2025-56295
Last modified
CVE-2025-56295 is a high-severity vulnerability rated 7.3/10 on the CVSS scale. code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions.. EPSS estimates a 0.31% chance of exploitation in the next 30 days.
Description
code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Carmelo | Computer Laboratory System | 1.0 |
References
- https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-56295.mdExploit, Third Party Advisory
- https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-56295.mdExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2025-56295?
How severe is CVE-2025-56295?
How do I fix CVE-2025-56295?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-56276code-projects Food Ordering Review System 1.0 is vulnerable …5.4
- CVE-2025-5628A vulnerability, which was classified as problematic, has be…5.4
- CVE-2025-56280code-projects Food Ordering Review System 1.0 is vulnerable …5.4
- CVE-2025-56289code-projects Document Management System 1.0 has a Cross Sit…5.4
- CVE-2025-5629A vulnerability, which was classified as critical, was found…9.8
- CVE-2025-56293code-projects Human Resource Integrated System 1.0 is vulner…5.4
- CVE-2025-5630A vulnerability has been found in D-Link DIR-816 1.10CNB05 a…9.8
- CVE-2025-56301An issue was discovered in Chipsalliance Rocket-Chip commit …7.5
- CVE-2025-56304Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 …6.1
- CVE-2025-5631A vulnerability was found in code-projects/anirbandutta9 Con…9.8
- CVE-2025-56311In Shenzhen C-Data Technology Co. FD602GW-DX-R410 (firmware …6.5
- CVE-2025-56313A Reflected Cross-Site Scripting (XSS) vulnerability was dis…6.1
Are you affected by CVE-2025-56295?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST