CVE-2025-14642

Name of the Vulnerable Software and Affected Versions code-projects Computer Laboratory System version 1.0

Description A flaw exists in code-projects Computer Laboratory System 1.0 that allows for unrestricted file uploads through manipulation of the image argument in the technical staff pic.php file. This issue can be exploited remotely. The exploit details have been publicly disclosed.

Recommendations Apply restrictions to file uploads in the technical staff pic.php file. Sanitize the image argument to prevent unrestricted uploads. Disable or restrict access to the technical staff pic.php file as a temporary measure.