CVE-2025-6870: SourceCodester Simple Company Website Content.php unrestricted upload
A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Content.php?f=service. The manipulation of the argument img leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6870?
CVE-2025-6870 has been rated as critical due to its potential for unrestricted file uploads.
How do I fix CVE-2025-6870?
To fix CVE-2025-6870, implement proper validation and restrictions on file uploads in the affected /classes/Content.php file.
What functionality is affected by CVE-2025-6870?
CVE-2025-6870 affects an unspecified functionality in the /classes/Content.php file related to the img parameter.
What can an attacker do with CVE-2025-6870?
An attacker can exploit CVE-2025-6870 to perform unrestricted uploads, potentially leading to the execution of malicious files.
Which software versions are impacted by CVE-2025-6870?
CVE-2025-6870 impacts version 1.0 of the SourceCodester Simple Company Website.