CVE-2025-6873: SourceCodester Simple Company Website Users.php unrestricted upload
A vulnerability, which was classified as critical, has been found in SourceCodester Simple Company Website 1.0. This issue affects some unknown processing of the file /classes/Users.php?f=save. The manipulation of the argument img leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6873?
CVE-2025-6873 is classified as a critical vulnerability.
How does CVE-2025-6873 affect the SourceCodester Simple Company Website?
CVE-2025-6873 affects the file /classes/Users.php?f=save, allowing for unrestricted file uploads.
What is the potential impact of exploiting CVE-2025-6873?
Exploiting CVE-2025-6873 may allow attackers to upload malicious files to the server.
How do I fix CVE-2025-6873?
To fix CVE-2025-6873, implement strict validation for uploaded files and restrict file types.
Is there a patch available for CVE-2025-6873?
A specific patch for CVE-2025-6873 has not been disclosed, so monitor official sources for updates.