CVE-2025-1598: SourceCodester Best Church Management Software asset_crud.php unrestricted upload
A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/assetcrud.php. The manipulation of the argument photo1 leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1598?
CVE-2025-1598 has been declared as critical due to its potential for unrestricted file uploads.
How do I fix CVE-2025-1598?
To fix CVE-2025-1598, restrict file upload capabilities and implement proper validation for file types and sizes.
What software is affected by CVE-2025-1598?
CVE-2025-1598 affects SourceCodester Best Church Management Software version 1.0.
What type of vulnerability is CVE-2025-1598?
CVE-2025-1598 is a file upload vulnerability that allows for unrestricted uploads through the argument photo1.
What could be the impact of CVE-2025-1598?
The impact of CVE-2025-1598 could include unauthorized access to the server and potential remote code execution.