PT-2025-18167 · Unknown · Scriptandtools Online-Travling-System

Maloyroyorko

·

CVE-2025-4065

·

Published

2025-04-29

·

Updated

2025-05-04

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions ScriptAndTools Online-Travling-System version 1.0
Description A critical issue has been identified, affecting the /admin/addadvertisement.php file, which leads to improper access controls. The issue can be exploited remotely.
Recommendations For ScriptAndTools Online-Travling-System version 1.0, consider restricting access to the /admin/addadvertisement.php file until a fix is available. As a temporary workaround, review and strengthen access controls to minimize the risk of exploitation.

Exploit

Fix

Improper Access Control

Incorrect Privilege Assignment

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-284CWE-266

Related Identifiers

CVE-2025-4065

Affected Products

Scriptandtools Online-Travling-System