CVE-2025-14195

Name of the Vulnerable Software and Affected Versions code-projects Employee Profile Management System version 1.0

Description A security flaw exists in code-projects Employee Profile Management System 1.0. The issue involves unrestricted file upload due to the manipulation of the per file argument within an unknown function of the file '/profiling/add file query.php'. This allows for remote exploitation. The exploit has been publicly released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.