CVE-2025-14195: code-projects Employee Profile Management System add_file_query.php unrestricted upload
A security flaw has been discovered in code-projects Employee Profile Management System 1.0. Impacted is an unknown function of the file /profiling/addfilequery.php. The manipulation of the argument perfile results in unrestricted upload. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14195?
CVE-2025-14195 has a high severity due to its potential for unrestricted file upload, which can lead to remote code execution.
How do I fix CVE-2025-14195?
To fix CVE-2025-14195, implement strict file type validation and limit file upload permissions in the Employee Profile Management System.
What systems are impacted by CVE-2025-14195?
CVE-2025-14195 impacts the code-projects Employee Profile Management System version 1.0.
Can CVE-2025-14195 be exploited remotely?
Yes, CVE-2025-14195 can be exploited remotely due to the nature of its vulnerability in the file upload functionality.
What potential risks are associated with CVE-2025-14195?
The risks associated with CVE-2025-14195 include unauthorized access, data breaches, and compromise of server integrity through remote file uploads.