CVE-2025-8256: code-projects Online Ordering System product.php unrestricted upload
Published Jul 28, 2025
·Updated
A vulnerability classified as critical has been found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/product.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Code-projects Online Ordering System
Fabian Online Ordering System=1.0
Event History
Jul 28, 2025
CVE Published
via MITRE·04:02 AM
Data Sourced
via MITRE·04:02 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:16 AM
DescriptionSeverityWeaknessAffected Software
Jun 24, 58473
Event
via NVD·10:32 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-8256?
CVE-2025-8256 is classified as a critical vulnerability.
2
How do I fix CVE-2025-8256?
To fix CVE-2025-8256, implement restrictions on file uploads and validate file types in the /admin/product.php function.
3
What systems are affected by CVE-2025-8256?
CVE-2025-8256 affects the Code-projects Online Ordering System version 1.0.
4
Can CVE-2025-8256 be exploited remotely?
Yes, CVE-2025-8256 can be exploited remotely.
5
What type of vulnerability is CVE-2025-8256?
CVE-2025-8256 is an unrestricted file upload vulnerability.