PT-2025-18167

CVE-2025-4065

Published

2025-04-29

Updated

2025-05-04

Description by

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ScriptAndTools Online-Travling-System version 1.0

Description A critical issue has been identified, affecting the /admin/addadvertisement.php file, which leads to improper access controls. The issue can be exploited remotely.

Recommendations For ScriptAndTools Online-Travling-System version 1.0, consider restricting access to the /admin/addadvertisement.php file until a fix is available. As a temporary workaround, review and strengthen access controls to minimize the risk of exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Maloyroyorko

Vendors

Affected products

Weakness enumeration

CWE-284: Improper Access Control

CWE-266: Incorrect Privilege Assignment

Related identifiers