A vulnerability was found in needyamin Library Card System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /signup.php of the component Add Picture. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?ctiid.295963 | Permissions Required VDB Entry |
| https://vuldb.com/?id.295963 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.496075 | Third Party Advisory VDB Entry |
| https://www.websecurityinsights.my.id/2025/02/library-card-system-shell-by-maloyroyorko.html | Exploit Third Party Advisory |
Configurations
History
25 Feb 2025, 03:41
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:needyamin:library_card_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Needyamin
Needyamin library Card System |
|
| References | () https://www.websecurityinsights.my.id/2025/02/library-card-system-shell-by-maloyroyorko.html - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.295963 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.295963 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.496075 - Third Party Advisory, VDB Entry |
16 Feb 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-16 17:15
Updated : 2025-02-25 03:41
NVD link : CVE-2025-1355
Mitre link : CVE-2025-1355
JSON object : View
Products Affected
needyamin
- library_card_system
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type