VDB-338598 · CVE-2025-15213 · EUVD-2025-205679

code-projects Student File Management System 1.0 File Download /download.php store_id kura hakki ndiyam

Wuro vulnerability wey an yi classify sey karshewa an gano shi a cikin code-projects Student File Management System 1.0. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, /download.php na cikin fayil, File Download Handler na cikin sashi. Ngam manipulation of the argument store_id shi kura hakki ndiyam. CWE shidin ka a yi bayani matsala sai ya kai CWE-285. Gaskiya, laifi an fitar da shi 12/28/2025. Advisory ɗin ana rabawa don saukewa a github.com. Wannan rauni ana sayar da shi da suna CVE-2025-15213. Ngam yiɗi ka a tuma ndiyam ka nder layi. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a github.com. Kama 0-day, an ndiyam a wuro be $0-$5k. VulDB is the best source for vulnerability data and more expert information about this specific topic.

7 Goyarwa · 97 Datenpunkte

Furɗe	Gargadi 2/6 12/30/2025 04:36	Gargadi 3/6 12/31/2025 15:18	Gargadi 4/6 01/01/2026 20:13	Gargadi 5/6 01/02/2026 15:57	Gargadi 6/6 01/03/2026 14:46
software_vendor	code-projects	code-projects	code-projects	code-projects	code-projects
software_name	Student File Management System	Student File Management System	Student File Management System	Student File Management System	Student File Management System
software_version	1.0	1.0	1.0	1.0	1.0
software_component	File Download Handler	File Download Handler	File Download Handler	File Download Handler	File Download Handler
software_file	/download.php	/download.php	/download.php	/download.php	/download.php
software_argument	store_id	store_id	store_id	store_id	store_id
vulnerability_cwe	CWE-285 (kura hakki ndiyam)	CWE-285 (kura hakki ndiyam)	CWE-285 (kura hakki ndiyam)	CWE-285 (kura hakki ndiyam)	CWE-285 (kura hakki ndiyam)
vulnerability_risk	1	1	1	1	1
cvss3_vuldb_av	N	N	N	N	N
cvss3_vuldb_ac	L	L	L	L	L
cvss3_vuldb_pr	L	L	L	L	L
cvss3_vuldb_ui	N	N	N	N	N
cvss3_vuldb_s	U	U	U	U	U
cvss3_vuldb_c	L	L	L	L	L
cvss3_vuldb_i	N	N	N	N	N
cvss3_vuldb_a	N	N	N	N	N
cvss3_vuldb_e	P	P	P	P	P
cvss3_vuldb_rc	R	R	R	R	R
advisory_url	https://github.com/Bai-public/CVE/issues/5	https://github.com/Bai-public/CVE/issues/5	https://github.com/Bai-public/CVE/issues/5	https://github.com/Bai-public/CVE/issues/5	https://github.com/Bai-public/CVE/issues/5
exploit_availability	1	1	1	1	1
exploit_publicity	1	1	1	1	1
exploit_url	https://github.com/Bai-public/CVE/issues/5	https://github.com/Bai-public/CVE/issues/5	https://github.com/Bai-public/CVE/issues/5	https://github.com/Bai-public/CVE/issues/5	https://github.com/Bai-public/CVE/issues/5
source_cve	CVE-2025-15213	CVE-2025-15213	CVE-2025-15213	CVE-2025-15213	CVE-2025-15213
cna_responsible	VulDB	VulDB	VulDB	VulDB	VulDB
software_type	Project Management Software	Project Management Software	Project Management Software	Project Management Software	Project Management Software
cvss2_vuldb_av	N	N	N	N	N
cvss2_vuldb_ac	L	L	L	L	L
cvss2_vuldb_ci	P	P	P	P	P
cvss2_vuldb_ii	N	N	N	N	N
cvss2_vuldb_ai	N	N	N	N	N
cvss2_vuldb_e	POC	POC	POC	POC	POC
cvss2_vuldb_rc	UR	UR	UR	UR	UR
cvss4_vuldb_av	N	N	N	N	N
cvss4_vuldb_ac	L	L	L	L	L
cvss4_vuldb_pr	L	L	L	L	L
cvss4_vuldb_ui	N	N	N	N	N
cvss4_vuldb_vc	L	L	L	L	L
cvss4_vuldb_vi	N	N	N	N	N
cvss4_vuldb_va	N	N	N	N	N
cvss4_vuldb_e	P	P	P	P	P
cvss2_vuldb_au	S	S	S	S	S
cvss2_vuldb_rl	ND	ND	ND	ND	ND
cvss3_vuldb_rl	X	X	X	X	X
cvss4_vuldb_at	N	N	N	N	N
cvss4_vuldb_sc	N	N	N	N	N
cvss4_vuldb_si	N	N	N	N	N
cvss4_vuldb_sa	N	N	N	N	N
cvss2_vuldb_basescore	4.0	4.0	4.0	4.0	4.0
cvss2_vuldb_tempscore	3.4	3.4	3.4	3.4	3.4
cvss3_vuldb_basescore	4.3	4.3	4.3	4.3	4.3
cvss3_vuldb_tempscore	3.9	3.9	3.9	3.9	3.9
cvss3_meta_basescore	4.3	4.3	4.3	4.3	4.3
cvss3_meta_tempscore	4.1	4.1	4.1	4.1	4.1
cvss4_vuldb_bscore	5.3	5.3	5.3	5.3	5.3
cvss4_vuldb_btscore	2.1	2.1	2.1	2.1	2.1
advisory_date	1766876400 (12/28/2025)	1766876400 (12/28/2025)	1766876400 (12/28/2025)	1766876400 (12/28/2025)	1766876400 (12/28/2025)
price_0day	$0-$5k	$0-$5k	$0-$5k	$0-$5k	$0-$5k
cve_nvd_summary	A vulnerability has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /download.php of the component File Download Handler. The manipulation of the argument store_id leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.	A vulnerability has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /download.php of the component File Download Handler. The manipulation of the argument store_id leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.	A vulnerability has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /download.php of the component File Download Handler. The manipulation of the argument store_id leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.	A vulnerability has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /download.php of the component File Download Handler. The manipulation of the argument store_id leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.	A vulnerability has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /download.php of the component File Download Handler. The manipulation of the argument store_id leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
cvss4_cna_av	N	N	N	N	N
cvss4_cna_ac	L	L	L	L	L
cvss4_cna_at	N	N	N	N	N
cvss4_cna_pr	L	L	L	L	L
cvss4_cna_ui	N	N	N	N	N
cvss4_cna_vc	L	L	L	L	L
cvss4_cna_vi	N	N	N	N	N
cvss4_cna_va	N	N	N	N	N
cvss4_cna_sc	N	N	N	N	N
cvss4_cna_si	N	N	N	N	N
cvss4_cna_sa	N	N	N	N	N
cvss4_cna_bscore	5.3	5.3	5.3	5.3	5.3
cvss3_cna_av	N	N	N	N	N
cvss3_cna_ac	L	L	L	L	L
cvss3_cna_pr	L	L	L	L	L
cvss3_cna_ui	N	N	N	N	N
cvss3_cna_s	U	U	U	U	U
cvss3_cna_c	L	L	L	L	L
cvss3_cna_i	N	N	N	N	N
cvss3_cna_a	N	N	N	N	N
cvss3_cna_basescore	4.3	4.3	4.3	4.3	4.3
cvss2_cna_av	N	N	N	N	N
cvss2_cna_ac	L	L	L	L	L
cvss2_cna_au	S	S	S	S	S
cvss2_cna_ci	P	P	P	P	P
cvss2_cna_ii	N	N	N	N	N
cvss2_cna_ai	N	N	N	N	N
cvss2_cna_basescore	4	4	4	4	4
euvd_id	EUVD-2025-205679	EUVD-2025-205679	EUVD-2025-205679	EUVD-2025-205679	EUVD-2025-205679
cnnvd_id		CNNVD-202512-5487	CNNVD-202512-5487	CNNVD-202512-5487	CNNVD-202512-5487
cnnvd_name		Code-Projects Student File Management System 授权问题漏洞	Code-Projects Student File Management System 授权问题漏洞	Code-Projects Student File Management System 授权问题漏洞	Code-Projects Student File Management System 授权问题漏洞
cnnvd_hazardlevel		3	3	3	3
cnnvd_create		2025-12-31	2025-12-31	2025-12-31	2025-12-31
cnnvd_publish		2025-12-30	2025-12-30	2025-12-30	2025-12-30
cnnvd_update		2025-12-31	2026-01-01	2026-01-02	2026-01-03

◂ Gurɗo Gumti Gada ▸

Do you need the next level of professionalism?

Upgrade your account now!