CVE-2025-5906mediumCWE-287CWE-306

CVE-2025-5906: falha de média gravidade em code-projects Laundry System

code-projects Laundry System data missing authentication

Publicada em

Seguir esta CVE+ Monitorar Laundry System

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.7%
A vulnerability classified as critical has been found in code-projects Laundry System 1.0. This affects an unknown part of the file /data/. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
code-projects · Laundry System
CVEs relacionadas — code-projects Laundry System

No mesmo produto, das mais perigosas para as menos.

CVE-2025-5765MEDIUMcode-projects Laundry System edit_laundry.php cross site scriptingEPSS 0.3%CVE-2025-5764MEDIUMcode-projects Laundry System insert_laundry.php cross site scriptingEPSS 0.3%CVE-2025-5797MEDIUMcode-projects Laundry System insert_type.php cross site scriptingEPSS 0.3%CVE-2025-5796MEDIUMcode-projects Laundry System edit_type.php cross site scriptingEPSS 0.3%CVE-2025-5766MEDIUMcode-projects Laundry System cross-site request forgeryEPSS 0.3%