CVE-2025-5840: SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload
A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /userupdatecustomerorder.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to initiate the attack remotely.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5840?
CVE-2025-5840 has been classified as a critical vulnerability due to its potential for unrestricted file uploads.
How do I fix CVE-2025-5840?
To fix CVE-2025-5840, ensure that file uploads are properly validated and restricted to authorized file types.
What kind of files can be uploaded due to CVE-2025-5840?
Due to CVE-2025-5840, an attacker can upload any type of file, which may lead to further exploitation.
Which system is affected by CVE-2025-5840?
CVE-2025-5840 affects SourceCodester Client Database Management System version 1.0.
What is the impact of exploiting CVE-2025-5840?
Exploiting CVE-2025-5840 could allow an attacker to upload malicious files, potentially compromising the system's integrity.