high7.3
CVE-2025-56295
code-projects Computer Laboratory System 1.0 has a file upload vulnerability.
Impact
code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Carmelo | Computer Laboratory System | Version 1.0 |