CVE-2025-13564mediumCWE-404

CVE-2025-13564: medium-severity vulnerability in SourceCodester Pre-School Management System

SourceCodester Pre-School Management System FilehelperController.php removefile denial of service

Published 23 Nov 2025 · Updated 24 Nov 2025

Follow this CVE + Monitor Pre-School Management System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.4%

A security flaw has been discovered in SourceCodester Pre-School Management System 1.0. Impacted is the function removefile of the file app/controllers/FilehelperController.php. Performing manipulation of the argument filepath results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

SourceCodester · Pre-School Management System

References

https://github.com/0xffaaa/cve/blob/main/Pre_School_Management_System_Arbitrary_File_Deletion_Vulnerabilit.md https://vuldb.com/?ctiid.333328 https://vuldb.com/?id.333328 https://vuldb.com/?submit.697083 https://www.sourcecodester.com/