CVE-2025-1169

A vulnerability was found in SourceCodester Image Compressor Tool 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /image-compressor/compressor.php. The manipulation of the argument image leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
References
Link Resource
https://vuldb.com/?ctiid.295073 Permissions Required VDB Entry
https://vuldb.com/?id.295073 VDB Entry Third Party Advisory
https://vuldb.com/?submit.494775 VDB Entry Exploit Third Party Advisory
https://www.sourcecodester.com/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:rems:image_compressor_tool:1.0:*:*:*:*:*:*:*

History

03 Mar 2025, 16:52

Type Values Removed Values Added
References () https://vuldb.com/?id.295073 - () https://vuldb.com/?id.295073 - VDB Entry, Third Party Advisory
References () https://www.sourcecodester.com/ - () https://www.sourcecodester.com/ - Product
References () https://vuldb.com/?ctiid.295073 - () https://vuldb.com/?ctiid.295073 - Permissions Required, VDB Entry
References () https://vuldb.com/?submit.494775 - () https://vuldb.com/?submit.494775 - VDB Entry, Exploit, Third Party Advisory
First Time Rems image Compressor Tool
Rems
CPE cpe:2.3:a:rems:image_compressor_tool:1.0:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 3.5
v2 : unknown
v3 : 6.1

11 Feb 2025, 06:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-02-11 03:15

Updated : 2025-03-03 16:52


NVD link : CVE-2025-1169

Mitre link : CVE-2025-1169


JSON object : View

Products Affected

rems

  • image_compressor_tool
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-94

Improper Control of Generation of Code ('Code Injection')