CVE-2025-1598: SourceCodester Best Church Management Software asset_crud.php unrestricted upload
First published: Sun Feb 23 2025(Updated: )
A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/asset_crud.php. The manipulation of the argument photo1 leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SourceCodester Best Church Management Software | ||
| Church Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-1598?
CVE-2025-1598 has been declared as critical due to its potential for unrestricted file uploads.
How do I fix CVE-2025-1598?
To fix CVE-2025-1598, restrict file upload capabilities and implement proper validation for file types and sizes.
What software is affected by CVE-2025-1598?
CVE-2025-1598 affects SourceCodester Best Church Management Software version 1.0.
What type of vulnerability is CVE-2025-1598?
CVE-2025-1598 is a file upload vulnerability that allows for unrestricted uploads through the argument photo1.
What could be the impact of CVE-2025-1598?
The impact of CVE-2025-1598 could include unauthorized access to the server and potential remote code execution.
- agent/title
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/source
- collector/mitre-cve
- source/MITRE
- agent/guess-ai
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/severity
- agent/tags
- agent/softwarecombine
- agent/event
- collector/nvd-api
- source/NVD
- vendor/sourcecodester
- canonical/sourcecodester best church management software
- vendor/mayurik
- canonical/church management system
- version/church management system/1.0