CVE-2025-11103: Projectworlds Online Tours and Travels change-image.php unrestricted upload
A security vulnerability has been detected in Projectworlds Online Tours and Travels 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/change-image.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11103?
CVE-2025-11103 is classified as a high-severity vulnerability due to its potential for unrestricted file uploads.
How do I fix CVE-2025-11103?
To fix CVE-2025-11103, restrict file uploads by validating file types and implementing proper authentication measures.
What does CVE-2025-11103 affect?
CVE-2025-11103 affects the Projectworlds Online Tours and Travels version 1.0 application, specifically the /admin/change-image.php file.
What type of vulnerability is CVE-2025-11103?
CVE-2025-11103 is a security vulnerability involving unrestricted file upload that could allow attackers to upload malicious files.
Can CVE-2025-11103 lead to a total system compromise?
Yes, if exploited, CVE-2025-11103 can possibly lead to total system compromise by allowing unauthorized file uploads.