CVE-2025-6870 - CERT CVE
ID CVE-2025-6870
Sažetak A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Content.php?f=service. The manipulation of the argument img leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Reference
CVSS
Base: 5.8
Impact: 6.4
Exploitability:6.4
Pristup
VektorSloženostAutentikacija
NETWORK LOW MULTIPLE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL PARTIAL
CVSS vektor AV:N/AC:L/Au:M/C:P/I:P/A:P
Zadnje važnije ažuriranje 29-06-2025 - 20:15
Objavljeno 29-06-2025 - 20:15