CVE-2025-8171: code-projects Document Management System insert.php unrestricted upload
A vulnerability, which was classified as critical, has been found in code-projects Document Management System 1.0. This issue affects some unknown processing of the file /insert.php. The manipulation of the argument uploadedfile leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8171?
CVE-2025-8171 is classified as a critical vulnerability.
What software is affected by CVE-2025-8171?
CVE-2025-8171 affects Code-projects Document Management System 1.0.
What is the cause of CVE-2025-8171?
CVE-2025-8171 is caused by unrestricted file upload due to manipulation of the uploaded_file argument in /insert.php.
How can I fix CVE-2025-8171?
To fix CVE-2025-8171, implement proper validation and restrictions on file uploads in the Document Management System.
What are the potential risks of CVE-2025-8171?
The risks of CVE-2025-8171 include potential malware upload and execution, leading to site compromise or data breaches.