CVE-2025-6872: SourceCodester Simple Company Website SystemSettings.php unrestricted upload
A vulnerability classified as critical was found in SourceCodester Simple Company Website 1.0. This vulnerability affects unknown code of the file /classes/SystemSettings.php?f=updatesettings. The manipulation of the argument img leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6872?
CVE-2025-6872 is classified as a critical vulnerability.
What is affected by CVE-2025-6872?
CVE-2025-6872 affects SourceCodester Simple Company Website 1.0 specifically at the file /classes/SystemSettings.php?f=update_settings.
How does CVE-2025-6872 exploit the system?
CVE-2025-6872 allows unrestricted upload due to manipulation of the argument img.
How do I fix CVE-2025-6872?
To fix CVE-2025-6872, it's recommended to update SourceCodester Simple Company Website to the latest version with security patches.
Can CVE-2025-6872 lead to further attacks?
Yes, CVE-2025-6872 can potentially lead to further attacks by allowing malicious uploads.