CVE-2025-0346: fallo de gravedad media en code-projects Content Management System
code-projects Content Management System Publish News Page publishnews.php unrestricted upload
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.1epss 0.6%
A vulnerability was found in code-projects Content Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/publishnews.php of the component Publish News Page. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
code-projects · Content Management SystemCVEs relacionadas — code-projects Content Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-10758MEDIUMcode-projects/anirbandutta9 Content Management System/News-Buzz index.php sql injectionEPSS 1.4%CVE-2025-5631MEDIUMcode-projects/anirbandutta9 Content Management System/News-Buzz publicposts.php sql injectionEPSS 0.6%CVE-2025-5633MEDIUMcode-projects/anirbandutta9 Content Management System/News-Buzz users.php sql injectionEPSS 0.5%CVE-2025-5632MEDIUMcode-projects/anirbandutta9 Content Management System/News-Buzz users.php sql injectionEPSS 0.5%CVE-2026-0546MEDIUMcode-projects Content Management System search.php sql injectionEPSS 0.4%CVE-2026-86168MEDIUMcode-projects Content Management System login.php sql injectionEPSS 0.4%