CVE-2025-0335: code-projects Online Bike Rental System Change Image unrestricted upload
First published: Thu Jan 09 2025(Updated: )
A vulnerability was found in code-projects Online Bike Rental System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the component Change Image Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other endpoints might be affected as well.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| code-projects Online Bike Rental | ||
| Online Bike Rental | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-0335?
CVE-2025-0335 is classified as a critical vulnerability.
How do I fix CVE-2025-0335?
To fix CVE-2025-0335, ensure that proper validation and restrictions are implemented for file uploads in the Change Image Handler component.
What components are affected by CVE-2025-0335?
CVE-2025-0335 affects the Change Image Handler functionality of the Online Bike Rental System 1.0.
Can CVE-2025-0335 be exploited remotely?
Yes, the exploitation of CVE-2025-0335 can be launched remotely.
What kind of attack does CVE-2025-0335 enable?
CVE-2025-0335 enables unrestricted file upload attacks.
- agent/weakness
- agent/references
- agent/title
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- agent/event
- collector/nvd-api
- source/NVD
- vendor/code-projects
- canonical/code-projects online bike rental
- vendor/fabianros
- canonical/online bike rental
- version/online bike rental/1.0