CVE-2025-14582: campcodes Online Student Enrollment System index.php unrestricted upload
A vulnerability was detected in campcodes Online Student Enrollment System 1.0. This affects an unknown function of the file /admin/index.php?page=user-profile. Performing a manipulation of the argument userphoto results in unrestricted upload. The attack can be initiated remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14582?
CVE-2025-14582 is considered a critical vulnerability due to the potential for unrestricted file upload.
How do I fix CVE-2025-14582?
To fix CVE-2025-14582, you should implement file type validation and restrict upload permissions in the affected component.
What is affected by CVE-2025-14582?
CVE-2025-14582 affects the Online Student Enrollment System 1.0 from Campcodes, specifically the user profile upload functionality.
Can CVE-2025-14582 be exploited remotely?
Yes, CVE-2025-14582 can be exploited remotely by manipulating the userphoto argument in the upload function.
What impact does CVE-2025-14582 have on security?
The impact of CVE-2025-14582 includes the potential for attackers to upload malicious files, leading to possible system compromise.