CVE-2025-10447: Campcodes Online Job Finder System applicationform.php unrestricted upload
A vulnerability was detected in Campcodes Online Job Finder System 1.0. The impacted element is an unknown function of the file /eris/applicationform.php. The manipulation of the argument picture results in unrestricted upload. It is possible to launch the attack remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10447?
CVE-2025-10447 has a high severity level due to the potential for unrestricted file uploads, which can lead to remote code execution.
How do I fix CVE-2025-10447?
To fix CVE-2025-10447, implement file type validation and restrict upload capabilities in the Campcodes Online Job Finder System.
What is affected by CVE-2025-10447?
CVE-2025-10447 affects the Campcodes Online Job Finder System version 1.0 in the /eris/applicationform.php file.
Can CVE-2025-10447 be exploited remotely?
Yes, CVE-2025-10447 can be exploited remotely by manipulating the 'picture' argument during file uploads.
What could an attacker do with CVE-2025-10447?
An attacker could exploit CVE-2025-10447 to upload malicious files, potentially gaining control of the system.