CVE-2025-2606: SourceCodester Best Church Management Software soulwinning_crud.php unrestricted upload
A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/app/soulwinningcrud.php. The manipulation of the argument photo/photo1 leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2606?
CVE-2025-2606 is categorized as a critical vulnerability.
How do I fix CVE-2025-2606?
To mitigate CVE-2025-2606, restrict access to the file /admin/app/soulwinning_crud.php and ensure proper validation of user inputs.
What is the impact of CVE-2025-2606?
CVE-2025-2606 may allow unauthorized access and manipulation of sensitive data within the SourceCodester Best Church Management Software.
Which versions are affected by CVE-2025-2606?
CVE-2025-2606 affects SourceCodester Best Church Management Software version 1.0.
How can I determine if my system is vulnerable to CVE-2025-2606?
To determine if your system is vulnerable to CVE-2025-2606, check if you are using SourceCodester Best Church Management Software version 1.0 and assess the security of the specified functionality.