A Remote Code Execution (RCE) vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the profile_pic parameter within pages_view_client.php.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/b1tm4r/CVE-2025-29017 | Exploit |
Configurations
History
30 Apr 2025, 16:40
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:codeastro:internet_banking_system:2.0.0:*:*:*:*:*:*:* | |
| References | () https://github.com/b1tm4r/CVE-2025-29017 - Exploit | |
| First Time |
Codeastro internet Banking System
Codeastro |
10 Apr 2025, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-10 14:15
Updated : 2025-04-30 16:40
NVD link : CVE-2025-29017
Mitre link : CVE-2025-29017
JSON object : View
Products Affected
codeastro
- internet_banking_system
CWE
No CWE.